https://crates. io/crates/arrayref has a supply chain attack that runs malicious build script through a transient build-time dependency during `cargo build` with https://crates. io/crates/proc-macro-en/1.
Source: [Hacker News](https://news.ycombinator.com/item?id=49372246)