A malicious package rustdecimal was detected in the Rust repository crates.io
The developers of the Rust language have warned about the discovery of a package rustdecimal in the crates.io repository, containing malicious code. The package was based on a legitimate package called rust_decimal and exploited a similarity in naming (typosquatting) hoping that users would not notice the absence of an underscore when searching or selecting a module from the list. Notably, this strategy proved to be successful […]
