Poisoned Pipeline / Incidents / AS177

AS177 · 2025-12

Finch crate impersonation credential theft

crates.io

Socket: malicious crate mimicking Finch exfiltrates credentials via a hidden dependency.

Mapped techniques

• T0129 Typosquatting
• T0184 Harvesting sensitive information from files

supply-chain campaign

Sources

• https://socket.dev/blog/malicious-crate-mimicking-finch-exfiltrates-credentials