Here's some crypto-stealing malware on Rust's Crates package repo.... just in case you're waiting for the PyPI and npm ones to show up

crates.io: Malicious crates faster_log and async_println | Rust Blog
Empowering everyone to build reliable and efficient software.

(blog.rust-lang.org)

Two Malicious Rust Crates Impersonate Popular Logger to Stea...
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.

Socket (socket.dev)