90
Supply chain attack on arrayref (blog.rust-lang.org)
submitted 1 week ago by Gobbel2000@programming.dev to c/rust@programming.dev
22 comments fedilink hide all child comments

If you recently used Cargo, make sure your system didn't get infected. Here is another article with a little more info: https://www.stepsecurity.io/blog/arrayref-rust-crate-supply-chain-attack

you are viewing a single comment's thread
view the rest of the comments
[-] deadcream@sopuli.xyz 4 points 1 week ago

It's necessary to integrate Rust with other languages (to build source code in other languages, generate some bindings, etc). Otherwise you will have to make Cargo understand every other build system in existence, and stay compatible with them forever.

Ideally this should be heavily audited and allowed only when it's really necessary.

this post was submitted on 20 Aug 2026
90 points (100.0% liked)

Rust

8248 readers
10 users here now

Welcome to the Rust community! This is a place to discuss about the Rust programming language.

Wormhole

!performance@programming.dev

Credits

  • The icon is a modified version of the official rust logo (changing the colors to a gradient and black background)

founded 3 years ago
MODERATORS
snowe@programming.dev
Ategon@programming.dev
EdTheLegendary@programming.dev
torcherist@programming.dev