Skip to main content
PPlamenu
HomeLive feedsPeopleGroupsRulesStaff
Sign in
PPlamenu
HomeLive feedsPeopleGroupsRulesStaff
Sign in
Rust Language@rust@social.rust-lang.org
⁨2⁩mo

⚠️ A few hours ago, a malicious crate was discovered on crates.​io which spread as a dependency of `arrayref` and some other crates, likely due to compromised credentials. The affected versions have been deleted.

For details and how to see if you are impacted, see: https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/

5100
Open original page
BoostsQuotesFavs
Sebastian Dröge 🍵@slomo@toot.cat
⁨2⁩mo

Replying to an earlier post

@rust Can you share details about what the malicious payload was doing? I wasn't affected but those who were probably would like to know to be to handle that accordingly, e.g. by revoking credentials if those got out.

⁨Aug⁩ ⁨20⁩, ⁨2026⁩, ⁨12:12⁩en
0000
Open original page
BoostsQuotesFavs