www.justalongurl.com

the world wide web for retro machines

Hacker News |Technology |Aug 20, 2026

Malicious Rust crate version hides remote code execution in typosquatted dependency

A compromised release of the widely used Rust crate arrayref was published on crates.io on August 20, 2026, with a hidden build-time payload that downloads and runs a remote binary.

register or log in to get more services such as weather report, extended news articles and web search