News for hackers. Stuff that matters.

A comment on Malicious Rust crate Arrayref runs a build-time payload. Parent comment

Re:Malicious Rust crate Arrayref runs a build-time payload by QuadmasterXLII on Thursday August 20, 2026 @01:56PM (#49377940)
If a python example doesn't count, why were your two example languages python and go?

But yeah, small number of large dependencies is the way to go.

[ Parent | on HN ]
Re:Malicious Rust crate Arrayref runs a build-time payload by bryanlarsen on Thursday August 20, 2026 @07:50PM (#49381873)
Replying to the sentence "The dependency tree of comparable Go and Rust projects seem comparable, IMO." with a Python example seems pretty odd.
[ Parent | on HN ]