RUSTSEC-2026-0081
`logtrace` was removed from crates.io for malicious code
logtrace appeared to be downloading a RAT.
The malicious crate had 2 versions published on 2026-04-01 that had a total of 30 downloads. There were no crates depending on this crate on crates.io.
Thanks to Socket.dev for detecting and reporting this to the crates.io team!
What each source reports
OSV No score
`logtrace` was removed from crates.io for malicious code
logtrace appeared to be downloading a RAT.
The malicious crate had 2 versions published on 2026-04-01 that had a total of 30 downloads. There were no crates depending on this crate on crates.io.
Thanks to Socket.dev for detecting and reporting this to the crates.io team!
- Record
RUSTSEC-2026-0081- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
logtracecrates.io |
0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2026-0081 is a vulnerability with no CVSS score yet in logtrace, published April 5, 2026. No source lists public exploit code. No source names a fixed version.