www.justalongurl.com

the world wide web for retro machines

Hacker News |Technology |Aug 20, 2026

Malicious Rust crate version hides remote code execution in typosquatted dependency

A compromised release of the widely used Rust crate arrayref was published on crates.io on August 20, 2026, with a hidden build-time payload that downloads and runs a remote binary.