Topic

Build-Time Code Execution

Malicious code that runs during compilation via build scripts such as Cargo's build.rs, before any application code executes.

Current clusters

invest1 distinct publisher

Rust's arrayref hijack lasted 86 minutes, and Wiz ties it to North Korea

Compiling any project that resolved the poisoned crate on August 20 was enough to run a credential stealer. Wiz links the infrastructure to DPRK-attributed campaigns.

Publishers:cryptopolitan.com

Reality

Evidence48
Adoption61
Hype gap+17
Incentives63
Confidence52

build4 distinct publishers

cargo build stopped being a safe verb: arrayref 0.3.10 ran a payload at compile time

The Rust Security Response Team deleted proc-macro1 and arrayref 0.3.10 on August 20 after a build script fetched and launched a binary. The lure was a yank warning.

Publishers:blog.rust-lang.orglwn.netruntimewire.comsocket.dev

Perspective Coverage

4 publishers

Builder: Builder 44%
Operator: Operator 49%
Investor: Investor 7%

Reality

Top News

Current clusters

Rust's arrayref hijack lasted 86 minutes, and Wiz ties it to North Korea

cargo build stopped being a safe verb: arrayref 0.3.10 ran a payload at compile time