🧰 arrayref

The items that name it 12

• Rust 1.100 Will Add Dependency Cooldowns to Cargo
  articleas classification.key entities2026-10-20
• Evolution of Web3 in Cloud Supply Chain Attacks
  articleas classification.key entities2026-10-07
• Package Manager Sandboxing (Andrew Nesbitt)
  articleas classification.key entities2026-09-24
• The State of Cloud Risk 2026: Most Security Findings Aren’t Real Attacker Opportunities
  articleas affected products2026-08-26

  malicious versions executed a backdoor at compile time

• The State of Open Source Supply Chain Attacks
  articleas classification.key entities2026-08-23
• Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper
  writeupas affected products2026-08-22

  Rust crate compromised via injected malicious dependency; ~245M all-time downloads, 406 dependent crate versions; deleted from crates.io; last safe version 0.3.9

• The OpenSourceMalware Show #18
  talkas classification.key entities2026-08-21
• Socket: Popular Rust Crates Compromised in Build-Time Supply Chain Attack
  writeupas affected products2026-08-20

  Legitimate Rust crate republished with malicious proc-macro1 dependency; ~152 million downloads for the prior clean release per RustSec; deeply embedded transitive dependency including into widely used Rust GUI frameworks

• Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
  writeupas affected products2026-08-20It is written here as arrayref (Rust crate).

  Malicious version published to crates.io on August 20, 2026; found in over 35% of all environments and 3/4 of environments where Rust is present.

• Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack
  writeupas affected products2026-08-20

  Compromised Rust crate, 244M downloads

• Open Source Malware Podcast — episodes
  otheras classification.key entities2026-05-22
• Cooldowns.dev
  articleas affected products2026-05-06It is written here as arrayref (crates.io).

  crates.io