{"slug": "hackers-poison-popular-rust-crates-to-steal-developers-credentials", "title": "Hackers poison popular Rust crates to steal developers' credentials", "summary": "Hackers have poisoned popular Rust crates to steal developers' credentials, according to a report from The Register. The attack targets the Rust programming language's package ecosystem, compromising widely used libraries to harvest authentication data from unsuspecting developers.", "body_md": "### MOST POPULAR\n\n[AI](https://beta.theregister.com/tag/ai)\n\n-\nai and ml\n\n#### AI companies are burning books, advocates complain to FTC\n\nFahrenheit 203, the temperature GPUs stop gorging on literature\n\n-\nDEVOPS\n\n#### Go updates may delight diehard gophers but displease AI overlords\n\nv 1.27 expands generics to support methods\n\n-\nEDGE AND IOT\n\n#### Waymo has designed a robocar chip to stay ahead of Tesla\n\n5 nm ML accelerators promise 1,000+ TOPS, ultra-low latency\n\n-\nSYSTEMS\n\n#### AMD inches closer to its goal of making AI suck less ... energy\n\nHouse of Zen claims latest systems already 4x more efficient than two years ago\n\n-\n#### Google pits Marvell against Broadcom as it chases AI crown\n\nAnd Marvell just offered the Chocolate Factory a $12.2B stake to sweeten the deal\n\n[Infosec](https://beta.theregister.com/security)\n\n-\nSecurity\n\n#### Russians are posing as Signal support to launch phishing attacks\n\nPLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!\n\n-\nSecurity\n\n#### Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack\n\nPLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more\n\n-\nBlack Hat and DEF CON\n\n#### DEF CON Franklin project enlists hackers to harden critical infrastructure\n\nVoting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included\n\n-\nSecurity\n\n#### EQT buys majority share in Swiss cybersecurity biz Acronis\n\nWent at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified\n\n-\nMalware Month\n\n#### Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight\n\nOn the plus side, infosec's a good bet for a long, stable career\n\n[FOSS](https://beta.theregister.com/tag/FOSS)\n\n-\n#### FOSS smashed one Microsoft monopoly. After 20 years of failure, it's time to smash another\n\nWord up\n\n-\n#### GNOME can look like Windows – and Flashback can do it without extensions\n\nNew 'Simple-taskbar' is an option, but there's a simpler, stabler way\n\n-\n#### A moment of silence, please, for the final release of Debian on x86-32\n\nNew Debian versions hit FOSSland in the form of 13.6 and 12.15\n\n-\n#### Baddies caught exploiting extensions bugs with perfect 10 scores on vulnerable Joomla websites\n\nFlaws in iCagenda, Balbooa Forms extensions can impact open source CMS that powers a million sites worldwide\n\n-\n#### Frame: A new X11 server – implemented directly in assembly\n\nJoins yserver, Phoenix, and of course XLibre – and outlier Arcan\n\n-\n#### Cinnamon 6.8 will support Wayland – if you want it\n\nNext version of Linux Mint’s desktop has both kinds of display server", "url": "https://wpnews.pro/news/hackers-poison-popular-rust-crates-to-steal-developers-credentials", "canonical_source": "https://www.theregister.com/security/2026/08/21/hackers-poison-popular-rust-crates-to-steal-developers-credentials/5291075", "published_at": "2026-08-21 14:57:00+00:00", "updated_at": "2026-08-21 20:43:02.031934+00:00", "lang": "en", "topics": ["ai-safety"], "entities": ["The Register"], "alternates": {"html": "https://wpnews.pro/news/hackers-poison-popular-rust-crates-to-steal-developers-credentials", "markdown": "https://wpnews.pro/news/hackers-poison-popular-rust-crates-to-steal-developers-credentials.md", "text": "https://wpnews.pro/news/hackers-poison-popular-rust-crates-to-steal-developers-credentials.txt", "jsonld": "https://wpnews.pro/news/hackers-poison-popular-rust-crates-to-steal-developers-credentials.jsonld"}}