Skip to content
Threat Feed
Subscribe

Tag

Malicious-Package

2 briefs RSS
critical threat

Malicious 'exploration' Rust Crate Downloads and Executes Remote Payload

A malicious Rust crate named 'exploration' was published to crates.io on 2026-06-02, containing a method that attempted to download and execute a payload from a remote site, and was removed within an hour with no evidence of actual usage.

exploited exploration supply-chain rust malicious-package remote-code-execution cwe-506
2t
critical advisory

Malicious guardrails-ai 0.10.1 Package Published to PyPI

A malicious version of the guardrails-ai package (0.10.1) was published to PyPI on May 11, 2026, advising users who installed this version to downgrade and treat the host as potentially compromised, rotating credentials and auditing GitHub accounts, with Snowglobe and Guardrails Hub API keys being invalidated on May 13, 2026.

guardrails-ai supply-chain pypi malicious-package
2r 1t