Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper
Excerpt
StepSecurity
Update, 2026-08-20: This incident is broader than a single crate. Two more crates owned by the same maintainer, internment 0.8.7 and append-only-vec 0.1.9, were published with the same build-time dropper dependency, and a second dropper crate (proc-macro-en) plus four more attacker-owned crates (aovine, arone, aronenao, tinymember) have been deleted from crates.io. All malicious versions are gone, the maliciously yanked releases have been restored, and the publishing accounts are locked. The sections below have been updated; the original timeline…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by StepSecurity on stepsecurity.io.
More from StepSecurity3
StepSecurity · Web page · Added 4 Nov
Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper
Update, 2026-08-20: This incident is broader than a single crate. Two more crates owned by the same maintainer, internment 0.8.7 and append-only-vec 0.1.9, were published with the same build-time dropper dependency, and a second dropper crate (proc-macro-en)…
StepSecurity · Web page · Added 31 Jul
Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan
On July 28, 2026, malicious beta versions of two Joyfill npm packages, @joyfill/components and @joyfill/layouts , were published to the npm registry. Both versions carry the same heavily obfuscated payload injected into the built distribution bundles. The…
StepSecurity · Web page · Added 10 Jun
The Hades Campaign: Graph ML PyPI Packages Deploy Cross-Platform Memory Scrapers, AI Analyst Misdirection, and a Wiper Deterrent
On June 8, 2026, version 0.8.101 of the popular graph machine learning package ensmallen on PyPI was identified as containing a highly sophisticated supply chain compromise. Concurrently, a series of related packages in the computational biology,…
On the same topics
Socket · Web page · Published 9 Nov
Malicious bee-js npm Release and Swarm Desktop Releases Deliver SleepyDuck Ethereum C2 Backdoor
Compromised maintainer accounts pushed malicious @ethersphere/bee-js 13.3.0 and Swarm Desktop 0.56.2, reusing SleepyDuck’s Ethereum-addressed C2 infrastructure. Socket Research Team Nov 9, 2026|21 min read Table of Contents 1. Background 2. How the Threat…
cloudsek.com · PDF · Added 9 Nov
NEBULA: Seven Fake AI SDK Packages on npm Install a Windows RAT That Needs No DLL
Seven Fake AI SDK Packages on npm Install a Windows RAT That Needs No DLL Four npm burner accounts deliver a syscall-only Windows RAT via a fake NebulaAI SDK lure CATEGORY ECOSYSTEM Adversary Intelligence npm Contents Executive Summary Analysis Malware…
WIRED · Web page · Published 3 Apr
The Mystery of ‘Jia Tan,’ the XZ Backdoor Mastermind
The scourge of software supply chain attacks—an increasingly common hacking technique that hides malicious code in a widely used legitimate program—can take many forms. Hackers can penetrate an update server to seed out their malware, or even break into the…
JFrog · Web page · Published 22 Jun
From PostCSS Masquerading to Windows RAT
The package name is not random. The legitimate postcss-selector-parser package is widely used across the JavaScript build ecosystem, with npm reporting more than 150M weekly downloads. postcss-minify-selector-parser is not a classic one-character typo.…