Skip to content

add advisory for time_calibrator#2688

Merged
djc merged 2 commits intorustsec:mainfrom
ubiratansoares:u/time_calibrator
Mar 3, 2026
Merged

add advisory for time_calibrator#2688
djc merged 2 commits intorustsec:mainfrom
ubiratansoares:u/time_calibrator

Conversation

@ubiratansoares
Copy link
Contributor

@ubiratansoares ubiratansoares commented Mar 3, 2026

Hi there! I'm a new Infra Engineer working for the Rust Foundation.

This crate was reported as malicious and taken down. Please let me know if I missed anything regarding this advisory.

@ubiratansoares ubiratansoares changed the title add advisory for time_callibrator add advisory for time_calibrator Mar 3, 2026
Copy link
Contributor

@LawnGnome LawnGnome left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good job, thanks! Just two small things.

actual usage. The crate was removed from crates.io and the user account was locked.
There were no crates depending on this crate on crates.io.

Thanks to Gabriel Silva for finding and reporting this to the Rust security response
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Have we checked that the reporter was OK with their name being credited?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@emilyalbini confirmed that on our behalf!

Co-authored-by: Adam Harvey <adam@adamharvey.name>
@djc djc merged commit 76c09d8 into rustsec:main Mar 3, 2026
1 check passed
@ubiratansoares ubiratansoares deleted the u/time_calibrator branch March 3, 2026 16:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants