Supply chain attack on arrayref

发生了什么

What happened On 2026-08-20 at 7:15 UTC we got a report that the proc-macro1 crate was malicious. The Rust Security Response Team verified this to be the case: the crate had a build script that was downloading a malicious payload. This crate proc-macro1 and others like it ( proc-macro-en , aovine , arone , aronenao , tinymember ) have been deleted. Furthermore, we discovered that the popular arrayref crate had recen…

摘要按规则整理自下方来源原文

时间线

1. 00:00
   Rust Blog 最先出现RRust Blog
2. 09:54
   Lobsters 出现讨论LLobsters

来源