Advisories for evm-units and uniswap-utils (#2501)

Author: carols10cents

crates/evm-units/RUSTSEC-0000-0000.md

@@ -0,0 +1,16 @@
+```toml
+[advisory]
+id = "RUSTSEC-0000-0000"
+package = "evm-units"
+date = "2025-12-03"
+url = "https://blog.rust-lang.org/2025/12/03/crates.io-malicious-crates-evm-units-and-uniswap-utils/"
+references = ["https://socket.dev/blog/malicious-rust-crate-evm-units-serves-cross-platform-payloads"]
+expect-deleted = true
+
+[versions]
+patched = []
+```
+
+# `evm-units` was removed from crates.io for malicious code
+
+It appeared to be attempting to steal cryptocurrency.

crates/uniswap-utils/RUSTSEC-0000-0000.md

@@ -0,0 +1,16 @@
+```toml
+[advisory]
+id = "RUSTSEC-0000-0000"
+package = "uniswap-utils"
+date = "2025-12-03"
+url = "https://blog.rust-lang.org/2025/12/03/crates.io-malicious-crates-evm-units-and-uniswap-utils/"
+references = ["https://socket.dev/blog/malicious-rust-crate-evm-units-serves-cross-platform-payloads"]
+expect-deleted = true
+
+[versions]
+patched = []
+```
+
+# `uniswap-utils` was removed from crates.io for malicious code
+
+It depended on the `evm-units` crate, which appeared to be attempting to steal cryptocurrency.