64
Rust Malware Staged on Crates.io
(blog.phylum.io)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 24 Aug 2023
64 points (93.2% liked)
Rust Programming
7734 readers
1 users here now
founded 5 years ago
MODERATORS
Another way to mitigate type squatting would be namespacing crates. Much easier to verify who owns the package and related packages
Doesn't really help: what if you typo the namespace instead? Same exact issue. Namespaces are useful for other things though, but not security.