Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Down

Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers' systems during compilation. [...]

<h2> Introduction and Background </h2> <p>The Rust ecosystem, celebrated for its memory safety and performance, relies heavily on <strong>crates</strong>—its package management

<a href="https://news.ycombinator.com/item?id=49374269">Comments</a>

Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the @antv ecosystem as part of

<p>Bitwarden serves over 10 million users and 50,000 businesses. On April 22, 2026, for exactly 93 minutes, its CLI was shipping malware.</p> <p>This was not a phishing campaign.