GHSA-3mmg-7c2q-8938: `sha-rust` was removed from crates.io for malicious code

Severity: Critical

CVSS Score: 10

It appeared to be attempting to steal credentials from local files.