crate-compromise

A supply-chain attack compromised the Rust crate arrayref, adding a malicious dependency that executes code at build time, affecting numerous downstream projects.