Post

Seth Larson
@sethmlarson.dev

The lovely folks from @rust-lang.org pinged me in a mutual security discussion channels about these ongoing attacks: There's no reason attackers wouldn't do the same to maintainers of Python projects. Report weirdness to security@python.org so we can alert others if needed. #python #security

blog.rust-lang.orgBe alert: targeted attacks on prominent Rustaceans | Rust BlogEmpowering everyone to build reliable and efficient software.
Rust Language@rust-lang.org

⚠️ We believe that there is an ongoing campaign targeting owners of popular crates and rust-lang team members that is attempting to compromise devices and accounts in order to use them to publish malware. See our blog post for details: blog.rust-lang.org/2026/09/17/t...

blog.rust-lang.orgBe alert: targeted attacks on prominent Rustaceans | Rust BlogEmpowering everyone to build reliable and efficient software.
Seth Larson
@sethmlarson.dev

Long-term no one wants to ask for vigilance from volunteers being targeted for contributing to OSS. This is the goal when we build security features like 2FA, Trusted Publishers, and recently Immutable Releases for PyPI. We're not all the way there yet, so I appreciate the patience and support 💜

1 repost2 likes

No replies yet.