Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Rust Language (rust@social.rust-lang.org)'s status on Thursday, 20-Aug-2026 19:48:22 JST Rust Language

   ⚠️ A few hours ago, a malicious crate was discovered on crates.io which spread as a dependency of `arrayref` and some other crates, likely due to compromised credentials. The affected versions have been deleted.

   For details and how to see if you are impacted, see: https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/

2. Embed this notice
   Rust Language (rust@social.rust-lang.org)'s status on Thursday, 09-Apr-2026 05:22:55 JST Rust Language

   ⚠️ An active phishing attack is targeting crate owners by asking them to "confirm that your email address is still active". These messages are not from crates.io, and should be ignored. (We will never ask you to confirm that your e-mail address is still active.) ⚠️

3. Embed this notice
   φ (fiore@brain.worm.pink)'s status on Tuesday, 09-Dec-2025 21:04:17 JST φ

   @twinspin6 @SuperDicq crates.io package called is-odd that includes a whole node installation because internally it uses the npm one

4. Embed this notice
   elilla&, triumphant over the precepts (elilla@transmom.love)'s status on Wednesday, 24-Sep-2025 20:20:50 JST elilla&, triumphant over the precepts

   in reply to

   Google guy: "We're proud to announce a donation of $250,000 to the Rust Foundation, plus $100,000 in Google Cloud credits to support Rust Crater"
   me: *looks at Shopify and Ruby Gems*
   me: *looks at crates.io*
   me: :blobcatsweats:

5. Embed this notice
   packagist (packagist@phpc.social)'s status on Tuesday, 23-Sep-2025 23:01:00 JST packagist

   Together with PyPI, Maven Central, crates.io and other major package registries we signed a statement on sustainable open source infrastructure.

   3B+ installs/month and evolving #composerphp and packagist.org requires sharing the costs.

   Our Blog: https://blog.packagist.com/a-call-for-sustainable-open-source-infrastructure/
   Open Letter: https://openssf.org/blog/2025/09/23/open-infrastructure-is-not-free-a-joint-statement-on-sustainable-stewardship/

   #phpc #php #supplychainsecurity #opensourcesustainability

6. Embed this notice
   Rust Language (rust@social.rust-lang.org)'s status on Saturday, 13-Sep-2025 14:32:59 JST Rust Language

   We received reports of a phishing campaign targeting crates.io users. Do not click on links asking to authenticate to protect your account. More information: https://blog.rust-lang.org/2025/09/12/crates-io-phishing-campaign/