Rusty base bankarrayref attacked supply chain

On 21 August, Cryptopolitan reported that, through a supply chain attack, the attackers had released three widely used malicious versions of the Rust code package, of which a library called arrayref was used by about three quarters of Rust ' s development environment. Malicious updates hide a back door that automatically steals log-in information when the user compiles the project and the user who compiles the affected version may have exposed the computer and key. According to Wiz researchers, the command and control route of the arrayref attack overlap with the actions of the Korean hacker organizations Sapphire Sleet and UNC1069 in Mastra, where the IP address shares the same security certificate and uses the same custodian Hostwinds. The attackers only added the wrong spelling proc-macro1 dependent, imitating the popular proc-macro2 without modifying the original code so that it could be tested and constructed. The attack was deleted 86 minutes after it had been published, but was heavily downloaded. The affected packages are widely used in the Solana and Etheum tools. The Rust team believed that the defender had not acted in bad faith and that its equipment or documents might have been invaded。