Rust developers are being warned about a new social-engineering campaign that abuses the job-hunting process. According to The Register, attackers are approaching owners of popular Rust crates with convincing company profiles and then inviting them to recruitment calls that include a malicious payload.
The report says the booby-trapped interviews are designed to compromise developers who are likely to have access to widely used open-source code. The attackers appear to be targeting crate maintainers specifically, using the trust and momentum of a real job search to lower a victim's guard.
The Register's coverage is the only source in this briefing, so there are no independent accounts to compare. Still, the warning is clear: Rust crate owners should verify that any unsolicited recruiter is legitimate before accepting files, links, or coding tasks during an interview process.