MAL-2026-6959None▾ SunlitMalicious code in proton_pfff (crates.io)
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
-= Per source details. Do not edit below this line.=-
The OpenSSF Package Analysis project identified 'proton-pfff' @ 99.99.5 (crates.io) as malicious.
It is considered malicious because:
The package communicates with a domain associated with malicious activity.
The package executes one or more commands associated with malicious behavior.
proton-pfffRefer to the advisory for the patched release.