Back Cointrust

Cross-Platform Malware Hidden in Rust Package Targets Web3 Developers

Cointrust • December 3, 2025

* DISCLAIMER: All information provided in CoinTrust is merely for informational purposes, we are not an investment advisor and not affiliated with any companies or ICO/Cryptocurrency Projects. To use this website you must accept our , Disclaimer and Privacy Policies.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious Rust Packages Target Web3 Developers A malicious Rust crate named evm-units was discovered, aimed at stealing cryptocurrency from Web3 developers. It was downloaded 7,257 times before being removed from the Rust package registry, along with another package, uniswap-utils, which depended on it and had 7,441 downloads. Both packages have been taken down by the crates.io team. 2 sources 26

Cross-Platform Malware Hidden in Rust Package Targets Web3 Developers

The full story

Extracted Entities

Attack Types (1)

Platforms (1)