Here's some crypto-stealing malware on Rust's Crates package repo.... just in case you're waiting for the PyPI and npm ones to show up