rust-type-erasure

Warn

Audited by Socket on Nov 4, 2026

1 alert found:

Security
SecurityMEDIUM
references/gat-anymap.md

High-severity Rust memory-safety flaw demonstrated: the Evil extractor erases the map-borrow lifetime, allowing safe caller code to retain a dangling &'static reference and trigger use-after-free/undefined behavior. The fragment contains no network, credential-theft, or system-modification behavior and is not conventional malware; its risk is the unsafe API design if used in a library. Confidence is high for the demonstrated flaw, though the fragment alone does not establish whether a published package contains this implementation.

Confidence: 99%Severity: 91%
Audit Metadata
Analyzed At
Nov 4, 2026, 12:17 AM
Package URL
pkg:socket/skills-sh/po4yka%2Frust-skills%2Frust-type-erasure%2F@927837fc219cbaca1b20797e1f37138a78c1aaf3add44d893c3f0711a0d28ca0