În afara temei aiqbench
Această știre a fost preluată de la o sursă pe care o urmărim, dar nu ține de domeniul AI sau cuantic, așa că nu există o perspectivă aiqbench pentru ea.
Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
Malicious versions of the arrayref Rust crate (and others) executed a backdoor at compile time. The campaign's infrastructure overlaps with recent DPRK supply chain attacks, including Mastra and axios.
On August 20, 2026, malicious versions of three Rust crates were published to crates.io: [email protected], [email protected], and [email protected]. The malicious crates added a typosquatted dependency (proc-macro1) whose build script downloads and executes a remote binary. Notably, proc-macro1 was the first dependency added to arrayref in its ten-year history. Because build scripts run during compilation, building an affected project was sufficient to execute the payload. arrayref can be found in over 35% of all environments. Even more notably, it's used in ¾ of all environments where Rust is present. The Rust Security Response Team deleted the malicious versions and locked the account, and assesses that…
Extras afișat conform termenilor RSS ai publicației · 104 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe
Measuring Generative AI Content in Political Campaigns: Evidence of Rising Adoption and Non-Disclosure
arXiv · 10 nov. 2026
SPARC Segmentation to Prediction via Affine Regression and Counterfactuals
arXiv · 29 iul. 2026
SlowLab: Benchmarking Autonomous AI Agents on a Year of Experiments They Cannot Undo
arXiv · 27 oct. 2026
Measure by measure, studying society accurately
MIT News · 16 sept. 2026