21
crates.io: an update to the malicious crate notification policy (blog.rust-lang.org)
submitted 9 months ago by to c/rust@programming.dev
2 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 9 months ago*

Reported: December 9, 2025
Issued: February 12, 2026

Does this mean it took two full months from the time some obvious "typosquat" packages got added and immediately reported before they were removed? That's for the "finch" ones, looks like they got the others right away. Maybe they were not so obvious?

  • permalink
  • fedilink
  • source
    •