Tagged with

The Rust Supply Chain Attack That Weaponized Cargo’s Own Safety Feature

How the arrayref compromise turned a routine cargo update into silent RCE, weaponizing yanked versions as bait