Open-source package vulnerability · Rust (crates.io)
GHSA-x468-phr8-h3p3: `uniswap-utils` was removed from crates.io for malicious code
critical
It depended on the evm-units crate, which appeared to be attempting to steal cryptocurrency.
Published Feb 6, 2026
Affected packages
uniswap-utils
- Ecosystem
- Rust (crates.io)
- Affected
- >= 0
- Fixed in
- No patched version yet
- Check
cargo tree -i uniswap-utils
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
It depended on the evm-units crate, which appeared to be attempting to steal cryptocurrency.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology