Malicious Rust crate Arrayref runs a build-time payload
A compromised release of the popular Rust crate arrayref pulled in a typosquatted proc-macro1 whose build script downloads and runs a remote binary at compile…
- Imported
- Hacker News
- safedep.io
- 0
- Views: 23
- Bookmark
- 0
A compromised release of the popular Rust crate arrayref pulled in a typosquatted proc-macro1 whose build script downloads and runs a remote binary at compile…
Source: safedep.io (413 points, 373 comments) Hacker News discussion
Reader Support
Support WebNovare
Send a crypto tip if this article helped you.
Log in or register to like, bookmark, watch tags, and comment.
Comments
No comments yet.
Log in or register to join the conversation.