turbohz@programming.dev to Rust@programming.devEnglish · 1 month agocrates.io: Malicious crates faster_log and async_println | Rust Blogblog.rust-lang.orgexternal-linkmessage-square9fedilinkarrow-up145arrow-down10cross-posted to: lobsters
arrow-up145arrow-down1external-linkcrates.io: Malicious crates faster_log and async_println | Rust Blogblog.rust-lang.orgturbohz@programming.dev to Rust@programming.devEnglish · 1 month agomessage-square9fedilinkcross-posted to: lobsters
minus-squarefartsparkles@lemmy.worldlinkfedilinkarrow-up6·edit-21 month agoBoth faster_log and async_println were purely malicious packages (not taken over and turned malicious). I know faster_log is typosquatting / luring fast_log users but I’m not sure about about async_println (which was a clone of the malicious faster_log). async_std::print is a thing so I guess trying to lure users who search crates before docs :shrug:
minus-squarenebeker@programming.devlinkfedilinkEnglisharrow-up2·1 month agoI mean, if you want your prints to be asynchronous you’re looking for trouble to begin with. The previous statement is a joke.
Both faster_log and async_println were purely malicious packages (not taken over and turned malicious).
I know faster_log is typosquatting / luring fast_log users but I’m not sure about about async_println (which was a clone of the malicious faster_log).
async_std::print is a thing so I guess trying to lure users who search crates before docs :shrug:
I mean, if you want your prints to be asynchronous you’re looking for trouble to begin with.
The previous statement is a joke.