Malicious Rust Crate 'evm-units' Delivers OS Payloads to Developers
First seen 3 Dec 2025, 15:42 UTC
•
•86% similarity
•26
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
A malicious Rust crate named 'evm-units', masquerading as an Ethereum Virtual Machine utility, was found delivering silent, OS-specific payloads to developers' machines. Authored by 'ablerust', it was hosted on Crates.io for approximately eight months, accumulating over 7,000 downloads before being removed following a report from Socket Threat.
ThreatCluster AI