North Korean Hackers Tied to Rust Supply Chain Attack

Wiz researchers linked a supply-chain campaign that compromised several popular Rust crates on crates.io (arrayref, internment, append-only-vec) to North Korean state-sponsored actors. The attacker altered package manifests to depend on a typosquatted crate (proc-macro1) which executed during compilation, allowing the payload to harvest browser credentials, crypto wallet extensions and developer secrets; telemetry indicated wide exposure (arrayref present in ~75% of cloud Rust environments). The Rust Security Response Team revoked the maintainer's credentials and removed malicious versions, and organizations are advised to treat systems that compiled the tainted crates as compromised and rotate secrets.