1. Basic Information Article Title: ArrayRef Rust Crate Supply Chain Attack Publisher:...
1. Basic Information
Article Title: ArrayRef Rust Crate Supply Chain Attack
Publisher: StepSecurity
Publication Date: 2026-08-20
Severity: Critical
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on…
Rust deletes malicious releases of three crates after a proc-macro1 build script downloaded and ran a remote payload during…
Malicious updates turned routine builds into a delivery system for infostealer malware
Empowering everyone to build reliable and efficient software.
Researchers found significant infrastructure overlap between the attack on three Rust crates and recent North Korea-linked…
North Korean hackers compromised the popular arrayref package in a supply chain attack targeting the Rust ecosystem.
