proc-macro2
AssessLanguages & Frameworks
A Rust support crate commonly used by procedural macro authors.
Why it's here
Placed in Assess: 1 article(s) of evidence from 1 source(s), led by security coverage, with 0 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.
Evidence (1)
- 9Hacker News·8/20/2026securityMalicious Rust crate arrayref ran code at build time
A compromised release of the Rust crate arrayref was published to crates.io with a typosquatted dependency that executed a payload during compilation. The malicious versions were later removed, but the crate’s wide transitive use and yanking of older safe releases increased the likelihood that builds would encounter the bad release.