# Rust Supply chain attack on arrayref

- Product: Rust (https://whatsnew.fyi/product/rust)
- Vendor: Rust Foundation
- Date: 2026-08-20
- Original notes: https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/
- Permalink: https://whatsnew.fyi/product/rust/releases/2026-08-20-supply-chain-attack-on-arrayref

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

What happened On 2026-08-20 at 7:15 UTC we got a report that the proc-macro1 crate was malicious. The Rust Security Response Team verified this to be the case: the crate had a build script that was do…

- **security** — The proc-macro1 crate was identified and removed due to a malicious build script discovered on 2026-08-20