Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Sec - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7) +--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445) +---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89) +---- Thread: Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Sec (/showthread.php?tid=6322280)

Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Sec - Stanley - Mar 19, 2026 Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Sec Cybersecurity researchers have discovered five malicious Rust crates that masquerade as time-related utilities to transmit .env file data to the threat actors. The Rust packages, published to crates.io, are listed below - chrono_anchor dnp3times time_calibrator time_calibrators time-sync The crates, per Socket, impersonate timeapi.io and were published between late February and early March https://thehackernews.com/2026/03/five-malicious-rust-crates-and-ai-bot.html