🧰 RustSec

The items that name it 3

• lee1981 (@lee1981b) on X
  advisoryas tools2026-10-27It is written here as RustSec: zip listing covers separate symlink/Unix-permission issues, no exact-CVE entry verified..
• Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper
  writeupas classification.key entities2026-08-22
• Socket: Popular Rust Crates Compromised in Build-Time Supply Chain Attack
  writeupas tools2026-08-20

  Security advisory database/service that documented the malicious dependency and build script behavior and disclosed technical details, noting ~152 million downloads of the prior clean arrayref release