Rustaceans warned of job interviews with a malicious payload
Rust project warns attackers use fake recruiter interviews targeting crate owners to deploy RATs and compromise the package ecosystem.
62
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 25, 2026
- Last mentionedSep 21, 2026
Timeline
4 articles · newest firstBe alert: targeted attacks on prominent Rustaceans
crates.io security team warns of an ongoing social engineering campaign targeting Rust crate maintainers via fake video calls to steal accounts and publish malware.
68
Be alert: targeted attacks on prominent Rustaceans
Ongoing social engineering campaign targets Rust maintainers via fake recruiters and video calls to compromise accounts and publish malicious crates.
70
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
Compromised maintainer account published malicious versions of popular Rust crates with 245M downloads, delivering a build-time payload via typosquatted proc-macro1 dependency.
82
Appears with
- crates.ioproduct · 3
- arrayrefproduct · 2
- crates.iovendor · 2
- crates.ioorganization · 1
- North Koreathreat actor · 1
- popular crate maintainersvictim · 1
- Rust Security Response Teamorganization · 1
- popular crate ownersvictim · 1
- Wizvendor · 1
- append-only-vecproduct · 1
- Rust developersvictim · 1
- LinkedInvendor · 1
- Rust projectorganization · 1
- rust-langproduct · 1
- rust-setup implantmalware · 1
- rust-lang membersvictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.