🧰 crates.io

The items that name it 14

• Rust 1.100 Will Add Dependency Cooldowns to Cargo
  articleas classification.technologies2026-10-20
• GhostAction Returns: Malicious “Security Audit” Workflows Now Mine Credentials from Entire Git Histories
  writeupas classification.technologies2026-10-09
• New GhostAction Wave Hits Hundreds of Repos, Expanding Beyond CI/CD Secrets to Cloud Credentials
  writeupas affected products2026-10-09

  Rust package registry; publishing credential (CARGO_REGISTRY_TOKEN) targeted; release history should be reviewed for unexpected versions.

• Evolution of Web3 in Cloud Supply Chain Attacks
  articleas affected products2026-10-07It is written here as crates.io (arrayref crate).

  arrayref crate

• The State of Open Source Supply Chain Attacks
  articleas classification.technologies2026-08-23
• Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper
  writeupas classification.technologies2026-08-22
• Socket: Popular Rust Crates Compromised in Build-Time Supply Chain Attack
  writeupas tools2026-08-20

  Rust package registry from which malicious/staging crates (proc-macro-en, aovine, arone, aronenao, tinymember) were removed and legitimate arrayref versions were restored

• Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
  writeupas tools2026-08-20

  Rust package registry where the malicious crate versions were published.

• Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack
  writeupas classification.technologies2026-08-20
• Rust
  articleas classification.technologies2026-07-24
• Compromised Rust crate onering performs code exfiltration
  writeupas classification.technologies2026-06-10
• Socket: TrapDoor Crypto Stealer
  writeupas classification.technologies2026-05-26
• Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
  articleas classification.technologies
• shai-hulud-detect: multi-ecosystem npm/PyPI/Composer/Crates/Go/Hex/RubyGems supply-chain worm scanner
  repoas classification.technologies