🧰 proc-macro1

The items that name it 5

• Rust 1.100 Will Add Dependency Cooldowns to Cargo
  articleas classification.key entities2026-10-20
• Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper
  writeupas affected products2026-08-22

  Typosquat of proc-macro2, attacker-published dropper crate carrying malicious build.rs; deleted from crates.io

• Socket: Popular Rust Crates Compromised in Build-Time Supply Chain Attack
  writeupas affected products2026-08-20

  Threat actor-controlled typosquat crate impersonating proc-macro2, contains malicious build.rs loader

• Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
  writeupas affected products2026-08-20It is written here as proc-macro1 (Rust crate).

  Typosquat of legitimate proc-macro2 crate; added as malicious dependency containing the backdoor build.rs logic.

• Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack
  writeupas affected products2026-08-20

  Malicious dependency package (typosquat of proc-macro2) injected into the compromised crates' manifests