Rust Security Response Team

Everything Fervor AI has published that touches Rust Security Response Team — 1 piece, newest first.

• The arrayref Attack Turned Cargo's Yank Warning Into the Delivery Mechanism

  The arrayref attacker yanked every clean release 24 seconds after publishing the poisoned one, which made Cargo's own deprecation warning the delivery channel and means…