---
title: "GHSA-qprh-m6p3-hwxc: `sui-execution-cut` was removed from crates.io for malicious code"
url: https://erroneo.us/security/ghsa/GHSA-qprh-m6p3-hwxc/
description: "GHSA-qprh-m6p3-hwxc (critical, crates.io (Rust)): sui-execution-cut was removed from crates.io for malicious code. sui-execution-cut included a build script…"
type: advisory
section: "Security Digest"
date_published: 2026-05-04
date_modified: 2026-05-04
publisher: erroneo.us
author: erroneo.us Security Desk
ghsa: "GHSA-qprh-m6p3-hwxc"
license: All rights reserved. Quote with attribution and a link.
---

# GHSA-qprh-m6p3-hwxc: `sui-execution-cut` was removed from crates.io for malicious code

## Affected packages

- crates.io (Rust) `sui-execution-cut` >= 0 → fixed: none listed

## Details

sui-execution-cut included a build script that attempted to exfiltrate data from the build machine. The malicious crate had 1 version published on 2026-04-20 and had no evidence of actual usage. This crate had no dependencies on crates.io.

## Sources

- [GitHub Advisory GHSA-qprh-m6p3-hwxc](https://github.com/advisories/GHSA-qprh-m6p3-hwxc)
- [rustsec.org](https://rustsec.org/advisories/RUSTSEC-2026-0108.html)

---
Source page: https://erroneo.us/security/ghsa/GHSA-qprh-m6p3-hwxc/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt