RustSec logo

HistoryEditJSON (OSV)

RUSTSEC-2026-0264

proc-macro-en was removed from crates.io due to malicious code

Reported
Issued
Package
proc-macro-en
Type
Vulnerability
Categories
References
Patched
no patched versions

Description

We identified that proc-macro-en contained the same build script as proc-macro1 and it was part of the same supply chain attack.

This crate had one single version published at 2026-08-20. The crate was removed from crates.io and related user account was locked.

Advisory available under CC0-1.0 license.