rust-variance
Warn
Audited by Socket on Nov 4, 2026
1 alert found:
AnomalyAnomalyreferences/variance-tables.md
LOWAnomalyLOW
references/variance-tables.md
The fragment is educational Rust variance documentation, not a covert runtime payload. Its `Sender<T>` demonstration intentionally contains an unsound contravariant channel: a borrowed message can outlive its `String`, and `Queue::drop` then invokes `drop_as`/`Box::from_raw`, causing use-after-free undefined behavior. This is a significant memory-safety risk if copied into production, but the example is explicitly labeled and explained; no malware indicators or network activity are present.
Confidence: 99%Severity: 65%
Audit Metadata