Malicious Rust Crate Arrayref Runs a Build-Time Payload

A compromised release of the popular Rust crate arrayref pulled in a typosquatted proc-macro1 whose build script downloads and runs a remote binary at compile…