RustSec logo

HistoryEditJSON (OSV)

RUSTSEC-2026-0261

aronenao was removed from crates.io due to malicious code

Reported
Issued
Package
aronenao
Type
Vulnerability
References
Patched
no patched versions

Description

We identified aronenao contained malicious code executed through a build script.

This crate had 11 versions, and the last was published at 2026-08-18 with no evidence of actual usage. The crate was removed from crates.io and the user account was locked.

Advisory available under CC0-1.0 license.