🧰 Cargo

The items that name it 25

• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-27
• lee1981 (@lee1981b) on X
  articleas classification.technologies2026-10-26
• Rust 1.100 Will Add Dependency Cooldowns to Cargo
  articleas classification.technologies2026-10-20
• Package managers have an integrity problem
  writeupas classification.technologies2026-10-14
• tensorlake NPM package compromised with Shai Hulud worm
  writeupas classification.technologies2026-10-08
• The Era of Software Quality, or the Era of Ostriches?
  articleas tools2026-10-05

  Rust package manager, discussed as a supply chain security risk due to dependency downloading

• renato-osec/goonfi-v2-decompiled
  repoas classification.technologies2026-10-02
• Package Manager Sandboxing (Andrew Nesbitt)
  articleas classification.technologies2026-09-24
• ForgeGuardian
  repoas classification.technologies2026-09-05
• Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper
  writeupas classification.technologies2026-08-22
• Socket: Popular Rust Crates Compromised in Build-Time Supply Chain Attack
  writeupas tools2026-08-20

  Rust package manager/build tool whose dependency resolution and automatic build.rs execution enabled build-time compromise

• Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
  writeupas tools2026-08-20

  Rust build tool that executes build scripts (build.rs) at compile time, triggering the malicious payload.

• Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack
  writeupas tools2026-08-20

  Rust build tool that automatically compiles and runs the build.rs script containing the malicious dropper logic

• Homebrew 6.0.0 security update
  articleas classification.technologies2026-07-24
• Rust
  articleas classification.technologies2026-07-24
• AI Security Briefing
  paperas affected products2026-07-18

  package ecosystem where nearly every model installs the untrusted dependency via source-based attacks

• Rust-proof your code with our new Testing Handbook chapter
  articleas classification.technologies2026-07-13
• Thinkst Package Proxy
  toolas affected products2026-06-26

  Rust package manager; supported by Package Proxy

• OpenSource Malware: Active Malware Campaigns in January-May 2026
  writeupas classification.technologies2026-06-12
• Compromised Rust crate onering performs code exfiltration
  writeupas tools2026-06-10

  Rust's build/package tool that compiles and runs build.rs scripts during build, enabling the payload to trigger merely by building the dependency

• Active Malware Campaigns in January-May 2026
  writeupas classification.technologies2026-06-08
• Why EDR and proxy won’t save you from supply chain malware
  articleas tools2026-06-02

  Package manager; has its own HTTP client that can bypass proxy settings

• Open Source Malware Podcast — episodes
  otheras classification.technologies2026-05-22
• Cooldowns.dev
  articleas tools2026-05-06

  Rust package manager; native cooldown not yet stable (unstable -Zmin-publish-age in 1.98, stabilization PR merged, targeted for Rust 1.100).

• Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
  articleas classification.technologies

In every workspace you can read 28