1
Arrayref v0.3.10 and v0.3.11 compromised on crates.io
Rust 生态再爆供应链攻击，arrayref 被植入恶意构建脚本，crates.io 紧急删除恶意包，开发者需立即检查依赖。
https://crates.io/crates/arrayref has a supply chain attack that runs malicious build script through a transient build-time dependency during `cargo b…