T1059.004

Command and Scripting Interpreter: Unix Shell

discovered 2026-05-28

The malicious Cargo build.rs shells out to external commands (git, curl) on the host during compilation.

View on MITRE ATT&CK

Seen in packages

Campaigns