RustSec logo

HistoryEditJSON (OSV)

RUSTSEC-2026-0101

safe-agent-rs was removed from crates.io for being affiliated with malicious code

Reported
Issued
Package
safe-agent-rs
Type
Vulnerability
Categories
Patched
no patched versions

Description

While safe-agent-rs did not directly contain malicious code, it was owned by the same user as pretty-changelog-logger and microsoftsystem64. safe-agent-rs also appeared to be imitating a different websocket library. We decided to remove it out of an abundance of caution.

This crate had 2 versions published on 2026-03-24 that had a total of 4138 downloads. There were no crates depending on this crate on crates.io.

Advisory available under CC0-1.0 license.