Malicious Rust crate Arrayref runs a build-time payload

Re:Malicious Rust crate Arrayref runs a build-time payload by pjmlp on Thursday August 20, 2026 @02:36PM (#49378426)

For those missing the npm like experience in C, they can use apt, yum, dnf, winget, nuget, conan, vcpkg.

[ Parent | on HN ]

Re:Malicious Rust crate Arrayref runs a build-time payload by kibwen on Friday August 21, 2026 @03:16AM (#49384849)

In a large enough C codebase, you may even find yourself somehow using all of these simultaneously. :)

[ Parent | on HN ]

Re:Malicious Rust crate Arrayref runs a build-time payload by pjmlp on Sunday August 23, 2026 @08:05AM (#49408139)

Yep.

[ Parent | on HN ]