{
  "id": 2141970,
  "title": "Supply chain attack on arrayref (Rust blog)",
  "url": "https://urgent.news/2026/08/20/supply-chain-attack-on-arrayref-rust-blog",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-20T13:26:01.000Z",
  "source": {
    "name": "LWN",
    "slug": "lwn",
    "url": "https://lwn.net/Articles/1089720/"
  },
  "original_language": "en",
  "account": null,
  "summary": "The Rust blog reports on a malicious crate, called proc-macro1 , that was uploaded to the crates.io repository. Furthermore, we discovered that the popular arrayref crate had recently been republished and made to depend on this crate, with the most recent versions yanked. We have removed the malicious version and unyanked the maliciously-yanked versions. Other crates by that author ( internment ,…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}