GHSA-f8h5-x737-x4xr: `finch-rust` was removed from crates.io for malicious code

Severity: Critical

CVSS Score: 10

It depended on the `sha-rust` crate, which appeared to be attempting to steal credentials from local files.