Be alert: targeted attacks on prominent Rustaceans

Summary

The Rust project warned of an ongoing campaign targeting rust-lang members and owners of popular crates, attempting to compromise devices and accounts to publish malware.

Key facts

• The Rust Blog published the warning on 2026-09-17.
• The campaign targets rust-lang members and owners of popular crates.
• Attackers set up video calls framed as job or project opportunities.
• The goal is to compromise devices and accounts to publish malware.

Why it matters

Maintainers of Rust crates and rust-lang members are the entry point to widely used code, so a compromised account can push malware to everyone who depends on those crates.