News for hackers. Stuff that matters.
Re:Malicious Rust crate Arrayref runs a build-time payload by account42 on Friday August 21, 2026 @04:54AM (#49385527)
Of course they can be made to do anything but that's not what they are designed for and as a result they also build a culture that frowns upon doing that. Debian and other Linux distributions would have never had the policy do handle dependency resolution themselves if contemporary build systems automatically fetched everything automatically rather than being designed to use dependencies provided by the user.

There are no comments on this comment yet.