`gabby-types-sec` was a malicious Rust crate published on crates.io that attempted to send telemetry data from the build environment to an arbitrary URL. The crate had only one version published on 2026-02-17 and was removed approximately nine months later. There is no evidence that this crate was actually used or depended upon by other projects.