Malicious Rust crate Arrayref runs a build-time payload

Community post

A compromised release of the popular Rust crate arrayref pulled in a typosquatted proc-macro1 whose build script downloads and runs a remote binary at compile…

WebNovare Imports W
Malicious Rust crate Arrayref runs a build-time payload

A compromised release of the popular Rust crate arrayref pulled in a typosquatted proc-macro1 whose build script downloads and runs a remote binary at compile…

Source: safedep.io (413 points, 373 comments) Hacker News discussion

Reader Support

Support WebNovare

Send a crypto tip if this article helped you.

Comments

No comments yet.

Log in or register to join the conversation.