L0Psec
Quick look at the rust mach-O referenced in the blog post: 74d3447e7cf99c99ea01a16332ec27432dfb0f491e10e67cd118065a60483306. (0 VT hits currently) The RSA key with "I am botking" and the LaunchAgent plist (most of it) are both readable in const
Rami McCarthy
In case you missed it, the spree of supply chain attacks visited Rust, hitting arrayref (245+ million downloads all time) Our Threat Center Advisory went out to customers a while ago. I wasn't going to blog ... and then we saw the DPRK connection 🇰🇵🤜🦀https://wiz.io/blog/rust-supply-chain-attack-on-arrayref-significant-overlap-with-dprk-campaigns
