`sec-gemini` was a malicious Rust crate published on crates.io that attempted to send telemetry data from the build environment to an arbitrary URL. It had a single version published on 2025-06-19 and was removed approximately 17 months later. There is no evidence that this crate was actually used by others.