North Korean hackers compromised the popular arrayref package in a supply chain attack targeting the Rust ecosystem.

Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on ...

Wiz says the supply chain attack that poisoned arrayref, a Rust package present in roughly three-quarters of environments ...

Cargo, Rust's package manager, runs build scripts during compilation. This allowed proc-macro1 to identify the operating ...

Rust deletes malicious releases of three crates after a proc-macro1 build script downloaded and ran a remote payload during ...

The Rust incident fits a broader pattern of attacks against open-source ecosystems. North Korea-linked operators have targeted npm, PyPI, Rust, Go and PHP packages while also using fraudulent ...

Cybersecurity researchers have linked a malicious backdoor in compromised Rust packages to previous North Korean supply chain ...