Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets

Source: The Hacker News
Published: Wed, 11 Mar 2026 05:12:00 GMT

News Summary

Cybersecurity researchers have discovered five malicious Rust crates that masquerade as time-related utilities to transmit .env file data to the threat actors. The Rust packages, published to crates.io, are listed below - chrono_anchor dnp3times time_calibrator time_calibrators time-sync The crates, per Socket, impersonate timeapi.io and were published between late February and early March

Source

Original report: https://thehackernews.com/2026/03/five-malicious-rust-crates-and-ai-bot.html

This entry mirrors the source feed summary for quick reading.