`gabby-types-sec` was removed from crates.io for malicious code
Affects gabby-types-secSource GCVE Database
Rated Medium by Threat Radar's AI analysis
Data as of 10 Nov 2026, 13:33 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
crates.iogabby-types-secpkg:cargo/gabby-types-secOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
The malicious crate has been removed from crates.io. Users should ensure they do not include `gabby-types-sec` in their dependencies. No further action is required if this crate was not used in any projects.
Description
`gabby-types-sec` was a malicious Rust crate published on crates.io that attempted to send telemetry data from the build environment to an arbitrary URL. The crate had only one version published on 2026-02-17 and was removed approximately nine months later. There is no evidence that this crate was actually used or depended upon by other projects.