RUST MALWARE STAGED ON CRATES.IO

Summary from the TLDR InfoSec newsletter

Yet another supply chain attack campaign on Rust programmers. Libraries that were named similar to popular libraries like postgress, if-cfg, xrvrv, serd, oncecell, lazystatic, and envlogger were malware uploaded to get the developer’s operating system information and transmit the data to a hard-coded Telegram channel.