—
RUSTSEC-2026-0260
`arrayref` 0.3.10 was removed from crates.io due to a malicious dependency
상세
A new version of the `arrayref` crate was published with a direct dependency on `proc-macro1`, which would execute a malicious build script.
This compromised version was published on 2026-08-20 and removed approximately 86 minutes later, with no evidence of actual usage.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
crates.io / arrayref
최초 영향 버전:
0.3.10-0 No fixed version published yet for arrayref. Pin to a known-safe version or switch to an alternative.