submitted 1 week ago by Gobbel2000@programming.dev to c/rust@programming.dev

22 comments fedilink hide all child comments

If you recently used Cargo, make sure your system didn't get infected. Here is another article with a little more info: https://www.stepsecurity.io/blog/arrayref-rust-crate-supply-chain-attack

you are viewing a single comment's thread
view the rest of the comments

[-] badmin@lemmy.today 2 points 1 week ago

JVM, ELF, Mach-O,.... binaries are infinitely worse when the attack vector is "compromised dev machine".

I'm not sure how anyone would even try to argue against that.

this post was submitted on 20 Aug 2026

90 points (100.0% liked)

Rust

8248 readers

14 users here now

Welcome to the Rust community! This is a place to discuss about the Rust programming language.

Credits

The icon is a modified version of the official rust logo (changing the colors to a gradient and black background)

founded 3 years ago

MODERATORS