cybercrime.clubhttps://cybercrime.club/tags/typosquatting/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usSat, 22 Aug 2026 11:07:16 -0400Poisoned arrayref, internment, and append-only-vec Crates Pull Build-Time Malware via a proc-macro2 Typosquathttps://cybercrime.club/posts/arrayref-rust-crate-proc-macro1-typosquat-supply-chain/Sat, 22 Aug 2026 11:07:16 -0400https://cybercrime.club/posts/arrayref-rust-crate-proc-macro1-typosquat-supply-chain/A compromised maintainer account published malicious releases of three popular Rust crates that pull in a typosquatted proc-macro2 lookalike whose build.rs script downloads and runs a platform-specific payload at compile time — with infrastructure overlapping known DPRK supply-chain campaigns.vulnerabilities