RustSec logo

HistoryEditJSON (OSV)

RUSTSEC-2026-0259

arone was removed from crates.io due to malicious code

Reported
Issued
Package
arone
Type
Vulnerability
References
Patched
no patched versions

Description

We identified arone contained malicious code executed through a build script.

This crate had 7 versions, and the last was published at 2026-08-18 with no evidence of actual usage. The crate was removed from crates.io and the user account was locked.

Advisory available under CC0-1.0 license.