2026-03-23 17:35 UTC
@tekkie it's not really "supply chain", it's just a "normal" vulnerability ✌️
Replies (1)
-
@jannic@hachyderm.io 2026-03-24 09:00
@kpcyrd @tekkie And the vulnerability is really narrow: To be affected, you need to download a malicious crate. Note that as soon as you compile such a malicious crate, it can do harm much more directly because compiling rust code inherently allows for arbitrary code execution through build.rs and proc macros.