Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
copperwire
15 days ago
|
parent
|
context
|
favorite
| on:
Malicious Rust crate Arrayref runs a build-time pa...
Shipping real proc-macro2 source inside the typosquat so builds keep working is devious. Most people would never notice a transitive dependency changing names slightly.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search: