Rust supply chain attack

Key Takeaways A malicious build.rs script runs during cargo build with the privileges of whatever process invoked Cargo. Stable Cargo gives you no supported way to compile a dependency tree...