Malicious Rust Crate arrayref Runs a Build-Time Payload

A compromised release of the popular Rust crate arrayref pulled in a typosquatted proc-macro1 whose build script downloads and runs a remote binary at compile… Read in full here: SafeDep - Real-time Open Source Software Supply Chain Security – 20 Aug 26 Malicious Rust Crate arrayref Runs a Build-Time Payload A compromised release of the popular Rust crate arrayref pulled in a typosquatted proc-macro1 whose build script downloads and runs a remote binary at compile…