DevThe Hacker Newsabout 2 hours ago
Rust Supply Chain Attack Hits Crates with 245M Downloads
1 min read
Malicious versions of arrayref, internment, and append-only-vec were published on crates.io via a compromised maintainer account, adding a typosquatted dependency that executed a remote payload during builds. The crates were removed within 86 to 107 minutes. arrayref has 245,385,500 total downloads.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
