According to CoinMeta, as reported by Cryptopolitan, the Rust library arrayref has been subjected to a supply chain attack. The attackers released three malicious versions of the Rust code package, and approximately three-quarters of the Rust development environments were using the arrayref library. The malicious updates contained a backdoor that could steal login information when users compiled their projects. Wiz researchers pointed out that the command and control pathways of this attack overlap with those used by North Korean hacker groups Sapphire Sleet and UNC1069. Furthermore, the IP addresses shared the same security certificate and used the same hosting provider Hostwinds.