Malicious Rust “evm-units” Impersonator Deploys OS

Gbhackers •Mayura Kathir • December 3, 2025

A malicious Rust crate masquerading as an Ethereum Virtual Machine (EVM) utility has been caught delivering silent, OS-specific payloads to developers’ machines. The package, named evm-units and authored by “ablerust,” was hosted on Crates.io for roughly eight months and accumulated over 7,000 all-time downloads before being swiftly removed following a report from the Socket Threat […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious Rust Crate 'evm-units' Delivers OS Payloads to Developers A malicious Rust crate named 'evm-units', masquerading as an Ethereum Virtual Machine utility, was found delivering silent, OS-specific payloads to developers' machines. Authored by 'ablerust', it was hosted on Crates.io for approximately eight months, accumulating over 7,000 downloads before being removed following a report from Socket Threat. 2 sources 26

Extracted Entities

Malicious Rust “evm-units” Impersonator Deploys OS

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (3)