`mysten-metrics` was a malicious Rust crate published on crates.io that contained a build script designed to exfiltrate data from the build machine. It had only one version published on 2026-04-20 and was removed from crates.io due to this malicious behavior. There is no evidence that this crate was actually used in the wild.