News for hackers. Stuff that matters.

A comment on Using Rust Macros to exfiltrate secrets. Parent comment

Re:Using Rust Macros to exfiltrate secrets by rabidferret on Friday May 14, 2021 @01:41PM (#27157256)
I would just like to tack on that malicious code is against the crates.io terms of service, and something like exfiltrating secrets in a build script is something that very clearly qualifies as malicious. If you ever encounter this in the wild, please make sure you report it to the crates.io team, so it can be removed.
[ Parent | on HN ]
Re:Using Rust Macros to exfiltrate secrets by bluejekyll on Friday May 14, 2021 @03:50PM (#27158948)
I think it would be better to report here, https://rustsec.org/, and folks running cargo audit would be aware of the issue even if they’ve already downloaded the dependency.
[ Parent | on HN ]