diff --git a/pkgs/by-name/bi/bindle/package.nix b/pkgs/by-name/bi/bindle/package.nix
deleted file mode 100644
index e056c6205d5f..000000000000
--- a/pkgs/by-name/bi/bindle/package.nix
+++ /dev/null
@@ -1,50 +0,0 @@
-{
-  lib,
-  rustPlatform,
-  fetchFromGitHub,
-  pkg-config,
-  openssl,
-}:
-
-rustPlatform.buildRustPackage rec {
-  pname = "bindle";
-  version = "0.9.1";
-
-  src = fetchFromGitHub {
-    owner = "deislabs";
-    repo = "bindle";
-    rev = "v${version}";
-    sha256 = "sha256-xehn74fqP0tEtP4Qy9TRGv+P2QoHZLxRHzGoY5cQuv0=";
-  };
-
-  postPatch = ''
-    rm .cargo/config
-  '';
-
-  doCheck = false; # Tests require a network
-
-  nativeBuildInputs = [ pkg-config ];
-  buildInputs = [ openssl ];
-
-  cargoHash = "sha256-cTgR1yp6TFwotm5VEG5e0O7R1zCMbQmcH2zmRmF7cjI=";
-
-  cargoBuildFlags = [
-    "--bin"
-    "bindle"
-    "--bin"
-    "bindle-server"
-    "--all-features"
-  ];
-
-  meta = with lib; {
-    description = "Object Storage for Collections";
-    homepage = "https://github.com/deislabs/bindle";
-    license = licenses.asl20;
-    maintainers = [ ];
-    platforms = platforms.unix;
-
-    knownVulnerabilities = [
-      "'bindle' is vulnerable to CVE-2025-62518 and upstream has been archived"
-    ];
-  };
-}
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index dc6dc101c845..fd7b5da4ff27 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -538,6 +538,7 @@ mapAliases {
   betterbird-unwrapped = throw "betterbird has been removed as there were insufficient maintainer resources to keep up with security updates"; # Added 2024-10-25
   bfc = throw "bfc has been removed, as it does not build with supported LLVM versions"; # Added 2025-08-10
   bibata-extra-cursors = throw "bibata-cursors has been removed as it was broken"; # Added 2024-07-15
+  bindle = throw "bindle has been removed since it is vulnerable to CVE-2025-62518 and upstream has been archived"; # Added 2025-10-24
   bitbucket-server-cli = throw "bitbucket-server-cli has been removed due to lack of maintenance upstream."; # Added 2025-05-27
   bitcoin-abc = throw "bitcoin-abc has been removed due to a lack of maintanance"; # Added 2025-06-17
   bitcoin-unlimited = throw "bitcoin-unlimited has been removed as it was broken and unmaintained"; # Added 2024-07-15