CVE-2026-77651

creationtimestamp| type| source ---|---|--- 2026-08-21 01:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117130908335198339 2026-08-21 01:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtkmee6xvo2e 2026-08-21 02:00:05+00:00| seen|...

CVE-2026-77651

The arrayref crate 0.3.10 for Rust pulls in a rogue build-time dependency (arrayref-proc-macro1) that executes malicious code at compile time, registering with a C2 server to enable arbitrary code execution. The crate was unpublished from crates.io. Details: https://blog.rust-lang.org/2026/08/20/...