News for hackers. Stuff that matters.

A comment on Malicious Rust crate Arrayref runs a build-time payload. Parent comment

Re:Malicious Rust crate Arrayref runs a build-time payload by account42 on Thursday August 20, 2026 @11:58AM (#49376434)
Only the ones that make it easy. Language package managers are a mistake.
[ Parent | on HN ]
Re:Malicious Rust crate Arrayref runs a build-time payload by pjmlp on Thursday August 20, 2026 @02:56PM (#49378663)
Unfortunely we haven't yet gotten a universal OS agnostic package, other than zip and tarballs.
[ Parent | on HN ]