Rust Supply Chain Attack: Malicious Crates with 245M Downloads Target Build-Time Execution
On August 20, 2026, the Rust Project removed malicious versions of three widely used crates from crates.io after a compromised maintainer account…
Tag: Nextron Systems
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages designed to deploy a Python-based information stealer on…
Nextron Systems Uncovers Malicious Go Packages in Supply Chain Attack
Nextron Systems discovered 16 Go packages containing the same malware as the npm packages, targeting the Go ecosystem with a Python infostealer.