silverpill on Nostr: Mitra has arrayref in its dependency tree but it is pinned to an old version. RE: ...

Mitra has arrayref in its dependency tree but it is pinned to an old version.

RE: https://social.rust-lang.org/users/rust/statuses/117127366248165334

quoting
nevent1q…5zyd

⚠️ A few hours ago, a malicious crate was discovered on crates.​io which spread as a dependency of `arrayref` and some other crates, likely due to compromised credentials. The affected versions have been deleted.

For details and how to see if you are impacted, see: https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/