crates.io logtrace vulnerabilities

Latest crates.io logtrace CVEs

Newest publication first

1. RUSTSEC-2026-0081 `logtrace` was removed from crates.io for malicious code

   Published 2026-04-05

   Unknown

   logtrace appeared to be downloading a RAT. The malicious crate had 2 versions published on 2026-04-01 that had a total of 30 downloads. There were no crates depending on this crate on crates.io. Thanks to Socket.dev for detecting and reporting this to the crates.io team!

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.