Product
arrayref
- First Reported
- Aug 20, 2026
- Latest Reported
- Oct 7, 2026
Reported Context (2)
- their recent attributed supply chain campaigns, including those targeting Axios, Mastra AI and Rust's arrayref. Supply-Chain Malware Uses Blockchain Transactions for Resilient Command and Control
- On August 20, 2026, malicious versions of three Rust crates were published to crates.io: arrayref@0.3.10, internment@0.8.7, and append-only-vec@0.1.9. The malicious crates added a typosquatted dependency (proc-macro1) Malicious Rust Crates Deliver Backdoor Through Build Scripts
Malware (2)
Threat Actors (4)
MITRE ATT&CK (10)
Vendors (1)
Products (16)
Tools (1)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.