Crates.io security advisory: Socket alerted us to the malicious crates `evm-units` and `uniswap-utils`, which we have removed.
Our official announcement: https://blog.rust-lang.org/2025/12/03/crates.io-malicious-crates-evm-units-and-uniswap-utils/
Socket's blog post with more technical analysis (TL;DR likely cryptostealer): https://socket.dev/blog/malicious-rust-crate-evm-units-serves-cross-platform-payloads
