Malicious Rust crate Arrayref runs a build-time payload(safedep.io)
532 points by abhisek | 468 comments
SafeDep blog post analyzing a malicious version of the Rust crate arrayref that executes a payload at build time via a supply-chain attack.
#build-scripts on Hacker News
1 story tagged build-scripts, newest first.