Fake recruiters are booking video calls with Rust maintainers and pushing malware.
The Rust project yanked three poisoned crates after a compromised account shipped a build-time backdoor.
Attackers planted 384 versions of malicious code across three package registries, automatically stealing cloud keys, SSH credentials, and blockchain wallet…