Malicious Rust Crate arrayref Runs a Build-Time Payload
safedep.io
A compromised release of the popular Rust crate arrayref pulled in a typosquatted proc-macro1 whose build script downloads and runs a remote binary at compile…