crates.io

Everything Fervor AI has published that touches crates.io — 1 piece, newest first.

• The arrayref Attack Turned Cargo's Yank Warning Into the Delivery Mechanism

  The arrayref attacker yanked every clean release 24 seconds after publishing the poisoned one, which made Cargo's own deprecation warning the delivery channel and means…