GitHub previews npm firewall that blocks packages at install
Enterprise Cloud customers can enforce malware advisories, severity, attestations, new install scripts and a package-age cooldown.
44
- Mentions · 7d1
- Mentions · 30d9
- All mentions15
- First seenAug 20, 2026
- Last mentioned1d ago
Timeline
15 articles · newest firstRust 1.100 adds optional Cargo cooldowns for newly published crates
The cooldown stays off by default, is only in beta, and will not drop versions already pinned in Cargo.lock.
48
Rust 1.100 adds opt-in Cargo cooldowns for new package versions
Teams must set a minimum publish age; the default stays zero, so upgrading Rust alone changes nothing.
48
Black-Box HashDoS: Attacking Hash Tables Without Knowing the Hash Function
A new black-box HashDoS technique slows hash-table lookups to linear time without knowing the hash function, including Rust's standard map.
52
Building Sound Evaluation Practices for Rust-Based Security Frameworks
Researchers propose a reproducible way to evaluate Rust fuzzers and test it on 20 projects.
41
What agents mean for Rust (and vice versa)
Niko Matsakis argues Rust's guardrails and performance controls suit agentic coding and can be strengthened further.
8
11 year old unsoundness bugs found in Rust borrow checker
An 11-year-old Rust borrow-checker unsoundness report draws heavy Hacker News attention.
48
Valen's Memory Safety: A New Kind of Borrow Checking
Valen's group-borrowing checker aims to stop use-after-free with fewer restrictions than Rust-style borrow checking.
28
Emitting metadata early makes building/checking Rust up to twice as fast
Headstart emits Rust metadata early, reportedly making builds and checks up to twice as fast.
5
Writing Rust code that's fast by asking agents to make the code faster
A developer shows agentic models, including Claude Opus 4.5, can iteratively optimize Rust for 2x-20x speedups.
50
C-to-Rust Fallacy: Automatic Refactoring != Memory Security
Study finds most automatic C-to-Rust translations fail to compile or still carry memory bugs.
58
North Korea’s job interview scam runs both ways
North Korea's Contagious Interview group targets Rust developers with fake job scams to steal credentials and crypto, infecting 30,000+ devices.
68
Rust Team Members and Popular Crate Owners Targeted via Video Calls
A social engineering campaign targets Rust developers via video calls to steal credentials and deploy malicious packages.
65
North Korean Hackers Tied to Rust Supply Chain Attack
Researchers linked a backdoor hidden in compromised Rust packages to North Korean actors' prior software supply chain attack campaigns.
58
Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
Malicious versions of the Rust crate arrayref executed a compile-time backdoor, with infrastructure overlapping recent DPRK supply chain attacks on Mastra and axios.
72
Appears with
- Cargoproduct · 3
- Socketorganization · 2
- proc-macro1malware · 2
- arrayrefproduct · 2
- Rust Projectorganization · 2
- npm firewallproduct · 1
- rust-langorganization · 1
- LinkedInorganization · 1
- PyO3product · 1
- DPRKthreat actor · 1
- C2SaferRustproduct · 1
- Valeproduct · 1
- Claude Sonnet 3.5ai model · 1
- Mastraproduct · 1
- Socket.devorganization · 1
- Rust Foundationorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.