build script news

Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads

A supply chain attack targeting the Rust ecosystem was recently reported, involving the brief availability of malicious versions of three popular Rust crates on crates.io, the official package repository. The incident stemmed from a compromised maintainer account, which was used to publish the tainted releases. These malicious versions incorporated a build script designed to download and…