Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns

**Supply-chain compromise on crates.io:** Malicious versions of popular Rust crates added a typosquatted dependency whose build script downloads and executes a platform-specific backdoor that beacons to C2, collects host and browser profile data, persists across reboots, and supports remote commands; the incident affected widely used packages (notably arrayref) and shows infrastructure overlap with DPRK-attributed campaigns.