crates.io phishing attempt
Thanks to my sponsors: Mattia Valzelli, Mark, Richard Pringle, Max Bruckner, Henrik Tudborg, Dirkjan Ochtman, jatescher, xales, Philipp Hatt, Yves, Romain Kelifa, villem, knutwalker, Hazel Duvall, Braidon Whatley, Yuriy Taraday, Ryan, Jeff Crocker, SeniorMars, Makoto Nakashima and 239 more
Earlier this week, an npm supply chain attack.
It’s turn for crates.io, the main public repository for Rust crates (packages).
The phishing e-mail looks like this:
And it leads to a GitHub login page that looks like this:
Several maintainers received it — the issue is being discussed on GitHub.
The crates.io team has acknowledged the attack and said they’d see if they can do something about it.
No compromised packages have been identified as of yet (Sep 12, 14:10 UTC).
Important links:
Did you know I also make videos? Check them out on YouTube!
Here's another article just for you:
Does Dioxus spark joy?
Note: this article is adapted from a presentation I gave at a Rust Paris Meetup — that’s why it sounds a little different than usual. Enjoy!
Good evening! Tonight, I will attempt to answer the question: Does Dioxus spark joy? Or at the very least, whimsy.
What’s Dioxus, you ask? It is first and foremost a name that is quote: “legally not inspired by any Pokémon”.