#rust
2 cases
The Rust project warned that crate maintainers and rust-lang members are being lured into fake job/contract video calls, then pushed to install a bogus codec or paste a clipboard command — aiming to hijack accounts and publish malware. Tactics resemble DPRK 'contagious interview' campaigns.
Supply Chain Attack
Rust Ecosystem Supply-Chain Attack Targeting arrayrefSupply Chain Attack
On August 20, 2026, attackers hijacked a prominent Rust ecosystem crate and pushed a malicious update to `arrayref@0.3.10`, a small array-conversion utility with approximately 245 million lifetime...
Supply Chain Attack