Crates.io Suspends Account After Malicious Crate Discovery

Tech · 2026-08-21 00:16:30

Verified

The crates.io repository received a malicious package named proc-macro1. The Rust blog reported a supply chain attack on the arrayref crate. The package had been republished to depend on the proc-macro1 crate. The associated account was suspended following the reports.

Sources