North Korean hackers compromised the popular arrayref package in a supply chain attack targeting the Rust ecosystem.

Researchers found significant infrastructure overlap between the attack on three Rust crates and recent North Korea-linked ...

The attack involved injecting a dependency on a malicious package, proc-macro1, which impersonated the popular proc-macro2 ...

A major software supply chain attack has struck the Rust ecosystem after threat actors hijacked widely used crates and ...

Wiz says the supply chain attack that poisoned arrayref, a Rust package present in roughly three-quarters of environments ...

Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on ...