GitHub Advisoryadvisory · crates.io

GHSA-x468-phr8-h3p3 `uniswap-utils` was removed from crates.io for malicious code

CRITICAL Published 2026-02-06 Modified 2026-02-06 Official page ↗

Ecosystem: crates.io
Packages: uniswap-utils
Severity: Critical
Reviewed: 2026-02-06

Affected packages

• crates.io uniswap-utils: all versions (no fix yet)

Description

It depended on the `evm-units` crate, which appeared to be attempting to steal cryptocurrency.

References