https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:03:47.422453+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/ghsa-xp79-9mxw-878j GHSA-xp79-9mxw-878j — `finch-rst` was removed from crates.io for malicious code 2026-10-07T19:03:47.423634+00:00

Affected: crates.io: finch-rst

This attempts to typosquat the existing crate [`finch`](https://crates.io/crates/finch) to steal credentials from local files.

The malicious crate had 1 version published on 2025-12-08 and had been downloaded 21 times. There were no crates depending on this crate on crates.io.

Thanks to Matthias Zepper of [NGI Sweden](https://ngisweden.scilifelab.se/) for reporting this to the crates.io team!