arrayref: Popular Rust Crate Targeted in Supply Chain Attack
arrayref is a widely used Rust crate with over 245 million downloads. A malicious version (0.3.10) was published via a compromised maintainer…
Tag: crate
internment: Rust Crate Compromised in Supply Chain Attack
internment is a Rust crate that was compromised in the August 2026 supply chain attack. Version 0.8.7 was published with a dependency…
append-only-vec: Rust Crate Affected by Malicious Release
append-only-vec is a Rust crate that had a malicious version (0.1.9) published during the supply chain attack. The release included a dependency…
proc-macro2: Legitimate Rust Crate Impersonated in Attack
proc-macro2 is a ubiquitous Rust crate that was impersonated by the malicious proc-macro1. The typosquatting was used to trick developers into including…