Popular Rust Crates Compromised in Build-Time Supply Chain Attack (socket.dev)

Some people have difficulties underestanding that a library downloaded at compile time from a random website might be compromised. Hey, we used https.

devs stay getting wrecked by these supply chain attacks. i know mini shai hulud continues to resurface in the node community https://endash.us/toolkit/items/mini-shai-halud