build.rs
Named by 2 kept items in this workspace.
1 items name it under affected products and 1 under tools.
Search every workspace for build.rs. It matches the name as written, so it can find other things that share it.
The items that name it 2
Contained the credential exfiltration routine
Malicious Rust build script used in Crates.io packages that searches for local keystores, encrypts data with a hardcoded XOR key, and exfiltrates it to GitHub Gists.
All technologies in this workspace.