crates.io phishing campaign | Rust Blog
We received multiple reports of a phishing campaign targeting crates.io users
(from the rustfoundation.dev domain name), mentioning a compromise of our
infrastructure and asking users to authenticate to limit damage to their crates.
These emails are malicious and come from a domain name not controlled by the
Rust Foundation (nor the Rust Project), seemingly with the purpose of stealing
your GitHub credentials. We have no evidence of a compromise of the crates.io
infrastructure.
We are taking st...
Read more at blog.rust-lang.org