Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
Rust deletes malicious releases of three crates after a proc-macro1 build script downloaded and ran a remote payload during compilation.
More info