On August 20, 2026, malicious versions of three Rust crates were published to crates.io from the account of their maintainer, droundy: [email protected], [email protected] and [email protected]. The Rust Security Response Team does not believe the maintainer published them, a...

On August 20, 2026, malicious versions of three Rust crates were published to crates.io from the account of their maintainer, droundy: [email protected], [email protected] and [email protected]. The Rust Security Response Team does not believe the maintainer published them, a...

Source: Wiz
Source Link: https://threats.wiz.io/all-incidents/arrayref-and-other-rust-crates-hijacked-in-supply-chain-attack