Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

Popular Rust Packages With 244M Downloads Compromised to Run Malware

Cybersecurity NewsAugust 20, 20264 min read

A major supply chain attack targeting the Rust ecosystem, in which two widely used crates, arrayref and append-only-vec, were hijacked to silently deliver malware the moment developers compiled their projects. Together, the two packages account for hundreds of millions of downloads, making this one of the largest Rust crate compromises ever recorded by download volume. […] The post Popular Rust Packages With 244M Downloads Compromised to Run Malware appeared first on Cyber Security News.

A major supply chain attack targeting the Rust ecosystem, in which two widely used crates, arrayref and append-only-vec, were hijacked to silently deliver malware the moment developers compiled their projects. Together, the two packages account for hundreds of millions of downloads, making this one of the largest Rust crate compromises ever recorded by download volume. Researchers at Aikido Security first spotted a new, suspicious package called proc-macro1…

Excerpt shown under the publisher's RSS terms · 67 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article