Safedep

Malicious Rust crate Arrayref runs a build-time payload

A compromised release of the popular Rust crate arrayref pulled in a typosquatted proc-macro1 whose build script downloads and runs a remote binary…