Re:Backdooring Rust crates for fun and profit
by ansible on Thursday November 18, 2021 @11:36AM
(#29267363)
I hope that the Rust Foundation (which finally exists) can put in some time / resources to help fix this.
I totally get that maintaining crates.io is a time suck for all involved, and mediating disputes would increase that even more.
But at some point, this is going to need to be addressed.
This a very old discussion if you keep digging through the links.