Compromised Rust Crate With 18,000+ Downloads Steals Source Code During Builds
Fri Aug 21 2026
Development
Malware
Open Source
gbhackers.com
A malicious update to the Rust crate called onering has been discovered, which exfiltrates source code changes from developers’ machines during the build process. Security researchers identified this behavior in version 1.4.1 of the package on June 10, 2026. The onering crate, designed as a high-throughput synchronous queue and channels library, has garnered over 18,000 […]
The post Compromised Rust Crate With 18,000+ Downloads Steals Source Code During Builds appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.