» Tag

crates.io

3 posts

Aug 20, 20268.50
Rust crate arrayref 0.3.10 pulls in malware via proc-macro1 dependency
crates.io package arrayref 0.3.10 pulls in malicious proc-macro1, executing remote payloads and affecting Rust GUI projects like egui and iced.
cargo crates.io malware rust
Jul 13, 20268.00
crates.io adds source code viewer and decouples accounts from GitHub
crates.io ships a source code viewer, GitHub-independent accounts via RFC, unmaintained-crate warnings, and a completed Svelte frontend migration.
crates.io developer-tools open-source package-management
Aug 20, 20267.90
Malicious Rust Crate Arrayref Executes a Build-Time Payload
A compromised release of the arrayref crate runs a malicious payload at build time, raising security concerns for developers.
crates.io dependencies malware rust
Ad
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.com