Rust 1.100 adds optional Cargo cooldowns for newly published crates
The cooldown stays off by default, is only in beta, and will not drop versions already pinned in Cargo.lock.
Stories per day · 30 days
1 RSS
4 stories, newest first · one card per story
Stories tagged #crates-io
Rustaceans warned of job interviews with a malicious payload
Rust project warns attackers use fake recruiter interviews targeting crate owners to deploy RATs and compromise the package ecosystem.
2
Be alert: targeted attacks on prominent Rustaceans
crates.io security team warns of an ongoing social engineering campaign targeting Rust crate maintainers via fake video calls to steal accounts and publish malware.
Be alert: targeted attacks on prominent Rustaceans
Ongoing social engineering campaign targets Rust maintainers via fake recruiters and video calls to compromise accounts and publish malicious crates.
3