arrayref supply-chain attack

Everything FervorAI has published that touches arrayref supply-chain attack — 1 piece, newest first.

• Briefing · August 21, 2026 · morning

  Four vendors shipped narrower permissions at the exact moment an agent acts, and a Rust crate that ran malware during cargo build showed why the moment of execution is…