CTI · corroborated · 2026-08-21
Compromised Rust Crate With 18,000+ Downloads Steals Source Code During Builds
Actors
—
Malware / tools
—
Campaigns
Rust crate supply chain compromise (onering, arrayref, append-only-vec, internment)
CVEs
—
Victim sectors
TechnologySoftware Development
Geography
—
MITRE ATT&CK
Indicators
No curated indicators tied to this case.
Detections
No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.