Sophisticated Rust Supply-Chain Attack Weaponizes Core Ecosystem Utility, Showing Direct Ties to North Korean State-Sponsored Actors
Executive Overview In a chilling escalation of software supply-chain compromises, security researchers have uncovered a complex, highly coordinated, and lightning-fast cyberattack targeting the Rust programming language ecosystem. The operation compromised the maintainer account of arrayref—a foundational, low-level utility downloaded over 245 million times and present in roughly 75% of environments where Rust is deployed. The…