---
id: 6765
title: "Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/rust-supply-chain-attack-on-arrayref-significant-overlap-with-dprk-campaigns"
published_at: "2026-08-20T15:56:39Z"
tags: ["supply-chain", "malware", "rust", "backdoor", "dprk", "wiz", "crates-io"]
phying_url: "https://phying.com/item/6765"
lang: en
---

# Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns

## Summary

Malicious arrayref, internment and append-only-vec crates appeared on crates.io: a typosquatted proc-macro1 build script fetched and ran a backdoor at compile time, overlapping recent DPRK campaigns.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2026-08-20T15:56:39Z
- **Original:** https://www.wiz.io/blog/rust-supply-chain-attack-on-arrayref-significant-overlap-with-dprk-campaigns
- **Phying News:** https://phying.com/item/6765