Malicious Rust Crate Arrayref Runs a Build-Time Payload
A compromised release of the popular Rust crate arrayref pulled in a typosquatted proc-macro1 whose build script downloads and runs a remote binary at compile…
Summary
A popular Rust crate, arrayref, was compromised through a typosquatted dependency that executes a remote binary during the build process. This incident highlights the vulnerabilities that can arise in package management systems and the importance of verifying dependencies.
Comments (492 of ) ⌛