Malicious Rust crate Arrayref runs a build-time payload
(safedep.io)
316 points
by abhisek
7 hours ago |
288 comments
https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on...
https://github.com/rustsec/advisory-db/issues/3161
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
()
