T1195

Supply Chain Compromise

discovered 2026-06-10

Cargo build script (build.rs) executes attacker code at compile time, before any library code or runtime, including in CI.

View on MITRE ATT&CK

Seen in packages