Malicious Rust Crate Arrayref Runs a Build-Time Payload
On August 20, 2026, a compromised release of the popular Rust cratearrayrefappeared on crates.io. Version 0.3.10 added a dependency on a typosquatted crate calledproc-macro1, whose build script downloads and runs a remote binary while a project compiles. The code runs at build time, so simply compiling a project that pulled the bad versions is enough … Devamını oku