It’s unclear if the attacks are part of previous campaigns against Rust, but the techniques used by the attackers match those used by North Korea.

The post Rust Team Members and Popular Crate Owners Targeted via Video Calls appeared first on SecurityWeek.

Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server.

The post Rust Supply Chain Attack Linked to North Korean Hackers appeared first on SecurityWeek.