Popular Rust Crates Compromised in Build-Time Supply Chain Attack

Three legitimate Rust crates (arrayref, internment, append-only-vec) were compromised with a malicious dependency that executes during build time. Any developer or CI/CD pipeline that built these packages between compromise and removal has potentially compromised systems with cross-platform malware capable of persistence and data exfiltration. This impacts the entire supply chain downstream of affected builds.