Rust Supply Chain Attack Linked to North Korean Hackers

A supply chain attack has been linked to North Korean hackers, involving the Rust programming language. The attackers compromised the arrayref package by introducing a malicious version that adds a dependency to download a payload from a remote server. This poisoned version of arrayref is designed to fetch and execute the malicious payload. The attack is believed to be the work of North Korean hackers. The malicious activity involves manipulating the package to connect to a remote server for payload retrieval. The attack highlights a vulnerability in the Rust supply chain.