6 ms·
Thread on the post from main rust blog: https://news.ycombinator.com/item?id=49372853 https://news.ycombinator.com/item?id=49372853 Direct post link: https://b
by ramimac 1mo ago
Thread on the post from main rust blog: https://news.ycombinator.com/item?id=49372853 https://news.ycombinator.com/item?id=49372853
Direct post link: https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/ https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on...
Initial report: https://github.com/rustsec/advisory-db/issues/3161 https://github.com/rustsec/advisory-db/issues/3161
Other vendor posts:
* https://www.stepsecurity.io/blog/arrayref-rust-crate-supply-chain-attack https://www.stepsecurity.io/blog/arrayref-rust-crate-supply-...
* https://research.jfrog.com/post/arrayref-proc-macro1-crates-io/ https://research.jfrog.com/post/arrayref-proc-macro1-crates-...
* https://www.aikido.dev/blog/two-popular-rust-crates-arrayref-and-append-only-vec-compromised-in-supply-chain-attack https://www.aikido.dev/blog/two-popular-rust-crates-arrayref...