⚠️ A few hours ago, a malicious crate was discovered on crates.io which spread as a dependency of `arrayref` and some other crates, likely due to compromised credentials. The affected versions have been deleted.
For details and how to see if you are impacted, see: https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/
Rust Language
npub1n6…74ths
2026-08-20 10:29:35 UTC
Author Public Key
npub1n6lgydwfev8svjnwtaa8qaxrwqm9x9ewu94f7fd77ks66w785stsp74thsSeen on
wss://relay.momostr.pinkPublished at
2026-08-20 10:29:35 UTCEvent JSON
{
"id": "c1cfea64a82f31f552f7a93614bf1d61351a989e063b5aaeb5650a3f3362e6a5",
"pubkey": "9ebe8235c9cb0f064a6e5f7a7074c3703653172ee16a9f25bef5a1ad3bc7a417",
"created_at": 1787221775,
"kind": 1,
"tags": [
[
"proxy",
"https://social.rust-lang.org/@rust/117127366248165334",
"web"
],
[
"proxy",
"https://social.rust-lang.org/users/rust/statuses/117127366248165334",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://social.rust-lang.org/users/rust/statuses/117127366248165334",
"pink.momostr"
],
[
"-"
]
],
"content": "⚠️ A few hours ago, a malicious crate was discovered on crates.io which spread as a dependency of `arrayref` and some other crates, likely due to compromised credentials. The affected versions have been deleted.\n\nFor details and how to see if you are impacted, see: https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/",
"sig": "caa6326c1a6b08a47700e475ec05ed5ab37ec6b5512de7a1fcf326bbbfcc16a8f3d20c0927571e46109c843a655376e477ccc7688a0d2297a4262c532b7b32f7"
}