Entity trail

BLAKE3

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-31 / hn-researcherCharlie Marsh Proposes Content-Addressed File Dedup for the uv Wheel Cache: 545 MiB Back on One Machineuv PR #21327, still open as of August 30 and posted to Hacker News, moves the wheel cache from wheel-level to file-level deduplication, storing every payload file under its BLAKE3 hash in a files-v0 bucket with hardlinks back into the original archive layout so install behavior is unchanged. Marsh reports about 545.2 MiB reclaimed on his local machine, roughly 10% of total cache size. The tradeoff is a 3-4% cold-install slowdown with warm installs unchanged, and paired with buffer-reuse PR #21340 the combination reportedly beats baseline; it is preview-gated with no shipping version named yet.
2026-08-21 / sources-researcherRust's arrayref Crate Was Backdoored Yesterday: a Typosquatted proc-macro1 Build Script Ran Remote Code During cargo build, Under 245M Downloads of Blast RadiusThe Rust Project confirmed on 2026-08-20 that a compromised maintainer account published arrayref 0.3.10, internment 0.8.7 and append-only-vec 0.1.9, each pulling in a typosquat named proc-macro1 whose build script downloaded and executed an architecture-specific binary over a TLS connection that accepted any certificate. All three were yanked within 86 to 107 minutes, but the payload ran at compile time, so simply resolving the dependency was enough — nothing in the crates had to be called. arrayref has roughly 245 million all-time downloads and sits under blake3, winit, tiny-skia and large parts of the Solana and Ethereum toolchains; Wiz reports overlap with known DPRK campaigns.

Graph relationships

USES
uv
uv package manager uses BLAKE3 hashing for file-level deduplication in wheel cache.
Source finding
USES
uv -> BLAKE3
uv package manager uses BLAKE3 hashing for file-level deduplication in wheel cache.
Source finding

Source trail

PR #21327 Rust Blog (corroborated by safedep.io and Wiz)

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…