Malicious Rust crate Arrayref runs a build-time payload

Malicious Rust crate Arrayref runs a build-time payload (safedep.io)

315 points

byabhisek

7 hours ago |

https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on...

https://github.com/rustsec/advisory-db/issues/3161