Malicious Rust crate Arrayref runs a build-time payload(safedep.io)
532 points by abhisek | 468 comments
SafeDep blog post analyzing a malicious version of the Rust crate arrayref that executes a payload at build time via a supply-chain attack.
1 story tagged arrayref, newest first.
532 points by abhisek | 468 comments
SafeDep blog post analyzing a malicious version of the Rust crate arrayref that executes a payload at build time via a supply-chain attack.