Hackers Infiltrate Rust Package Registry: 8,400+ Downloads of Fake Crates Designed to Steal Crypto Wallet Keys
Cybersecurity researchers discovered a sophisticated supply chain attack targeting cryptocurrency developers through malicious Rust packages. Two fake libraries—faster_log and async_println—impersonated the legitimate fast_log library, accumulating over 8,400 downloads before detection...