Researchers tie the arrayref Rust crate hijack to North Korean hackers

Wiz says the supply chain attack that poisoned arrayref, a Rust package present in roughly three-quarters of environments running Rust, has drawn comparisons with recent North Korean operations. The harmful update hid a backdoor that steals login information inside a code designe...