Skip to content
Threat Feed
Subscribe

Product

Append-Only-Vec (0.1.9)

1 brief RSS
high advisory

Supply Chain Attack Targeting Rust Ecosystem via Malicious Crate Dependencies

Threat actors associated with DPRK campaigns compromised the Rust crates.io registry by injecting malicious build scripts into typosquatted dependencies to execute a backdoor on developer and build environments.

arrayref +3
4t 5i