August 1, 2026
- A malicious Rust crate,
width-tablev0.1.0, posing as a table-width helper, walks the directory tree and exfiltrates files tocheckenv[.]cloud; it was pulled into a "Polymarket-5min-bot" project, with the campaign amplified by verified X accounts spreading the links (vxunderground). · Supply Chain
in When the Attacker Is a Model: AI Lands on Both Sides of the Fight