News for hackers. Stuff that matters.

A comment on Alert for Social Engineering Takeovers of Open Source Projects. Parent comment

Re:Alert for Social Engineering Takeovers of Open Source Pro... by andix on Sunday May 05, 2024 @05:56PM (#40268861)
Just for the main project, or for all/most packages on crates.io?
[ Parent | on HN ]
Re:Alert for Social Engineering Takeovers of Open Source Pro... by PartiallyTyped on Sunday May 05, 2024 @06:41PM (#40269271)
Every repository and team under rust-lang on github.
[ Parent | on HN ]
Re:Alert for Social Engineering Takeovers of Open Source Pro... by andix on Sunday May 05, 2024 @06:46PM (#40269305)
That's great, but I think that's not enough. This would need to extend to crates.io, I'm sure there are some packages, that are very commonly used and not part of rust-lang.
[ Parent | on HN ]