Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads

#Rust #Supply #Chain #Attack #Puts
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads

The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases that added a typosquatted dependency whose build script downloaded and executed a remote payload during compilation. The affected releases are…