North Korean hackers compromised the popular arrayref package in a supply chain attack targeting the Rust ecosystem.

Rust deletes malicious releases of three crates after a proc-macro1 build script downloaded and ran a remote payload during ...

Wiz says the supply chain attack that poisoned arrayref, a Rust package present in roughly three-quarters of environments ...

Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on ...

Cybersecurity researchers have linked a malicious backdoor in compromised Rust packages to previous North Korean supply chain ...