Community post
Malicious Rust crate Arrayref runs a build-time payload
A compromised release of the popular Rust crate arrayref pulled in a typosquatted proc-macro1 whose build script downloads and runs a remote binary at compile…
A compromised release of the popular Rust crate arrayref pulled in a typosquatted proc-macro1 whose build script downloads and runs a remote binary at compile… Source: safedep.io (413 points, 373 comments) Hacker News discussion
