Product

Rust

0 mentions in 7 days · 2 in 30 days · 2 total · first seen Aug 20, 2026 · last 25d ago

Timeline2 articles

North Korean Hackers Tied to Rust Supply Chain Attack

Researchers linked a backdoor hidden in compromised Rust packages to North Korean actors' prior software supply chain attack campaigns.

Cybersecurity researchers attributed a malicious backdoor planted in compromised Rust packages to North Korean threat actors based on ties to earlier supply chain attacks. The campaign targets the open-source developer ecosystem, where infected packages can propagate downstream to developer build systems. The attribution suggests DPRK-aligned actors continue investing in open-source supply chain tradecraft.

Infosecurity MagazineAug 21, 12:40 UTC · 25d agoThreat actor in the wild

Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns

Malicious versions of the Rust crate arrayref executed a compile-time backdoor, with infrastructure overlapping recent DPRK supply chain attacks on Mastra and axios.

Wiz researchers report that malicious versions of the arrayref Rust crate ran a backdoor during compilation, compromising developer build pipelines. The campaign's command-and-control infrastructure significantly overlaps with infrastructure used in recent DPRK supply chain attacks, including campaigns against Mastra and axios. Developers using affected crate versions should audit their builds and review dependencies.

Wiz BlogAug 20, 15:56 UTC · 26d agoThreat actor in the wild1

Appears with

threat actor DPRK 1 threat actor North Korean threat actors 1 malware Rust backdoor 1 organization Wiz 1 product arrayref 1 product axios 1 product Mastra 1 vendor Infosecurity Magazine 1 vendor Wiz 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.