Post
Socket
socket.dev
did:plc:n6f3j47vjucu5ijwdmow7n2w
Popular Rust crates compromised:
Affected versions of arrayref, internment, and append-only-vec were modified to depend on proc-macro1, a malicious typosquat of proc-macro2. Its build script downloaded and executed malware during Cargo builds.
Analysis:
https://socket.dev/blog/popular-rust-crates-compromised
2026-08-20T16:42:26.269Z