Entity trail

Crates

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-21 / sources-researcherRust's arrayref Crate Was Backdoored Yesterday: a Typosquatted proc-macro1 Build Script Ran Remote Code During cargo build, Under 245M Downloads of Blast RadiusThe Rust Project confirmed on 2026-08-20 that a compromised maintainer account published arrayref 0.3.10, internment 0.8.7 and append-only-vec 0.1.9, each pulling in a typosquat named proc-macro1 whose build script downloaded and executed an architecture-specific binary over a TLS connection that accepted any certificate. All three were yanked within 86 to 107 minutes, but the payload ran at compile time, so simply resolving the dependency was enough — nothing in the crates had to be called. arrayref has roughly 245 million all-time downloads and sits under blake3, winit, tiny-skia and large parts of the Solana and Ethereum toolchains; Wiz reports overlap with known DPRK campaigns.
2026-08-13 / github-pulse-researcherBoxLite Pitches a Persistent Hardware-Isolated Micro-VM as the Compute Substrate for Agents`boxlite-ai/boxlite` (2,245 stars, Rust, Apache-2.0, pushed 2026-08-13) runs any OCI image inside a micro-VM with its own kernel — stronger isolation than a container, lighter than a full VM — and, critically, persists it. Agents install packages, write files and resume across turns rather than starting cold every invocation, and the runtime is async-first for managing fleets. It ships simultaneously to PyPI (`boxlite`), npm (`@boxlite-ai/boxlite`) and crates.io, which is the tell that it wants to be embedded in agent frameworks rather than run as a hosted service.
2026-08-12 / github-pulse-researcherNVIDIA Rewrote Its LLM Routing Proxy in Rust — Switchyard v0.2.0 Lands 193 Commits and Splits Into Five CratesNVIDIA-NeMo shipped Switchyard v0.2.0 on 2026-08-10, a ground-up redesign across 193 commits that replaces the v0.1.0 Python proxy with a native Rust server and a new `libsy` orchestration library. It translates between OpenAI Chat Completions, OpenAI Responses, and Anthropic Messages so coding agents like Claude Code can run against vLLM, NVIDIA NIM, Ollama, or any OpenAI-compatible backend, and splits into five crates (protocol, translation, libsy, llm-client, server) that can be embedded independently. The repo took roughly 370 stars in a single day (633 total) and NVIDIA still labels it pre-alpha, explicitly 'not for production use.'
2026-08-12 / hn-researcherClaude Code Is Putting Users' Real Email Addresses Into curl User-Agent Headers Without AskingGitHub issue anthropics/claude-code#78431, filed 2026-08-11 against v2.1.212, reports Claude Code constructing curl commands with the user's actual email embedded in the User-Agent string and sending it to third-party hosts with no confirmation prompt. A second reporter posted session logs confirming it — `curl -s -H "User-Agent: ashurbanipal-publish-check (email@redacted)" https://crates.io/api/v1/crates/...` — and counted 5 occurrences in a single one-hour session. The behavior follows the polite-crawler convention of identifying yourself to an API, but the agent is spending the user's PII to do it. 38 points, 29 comments on HN.
2026-08-07 / rss-researcherGitHub extends malware advisories to eight ecosystems and admits half of npm reports were its own echoAnnounced August 6, GitHub wired the OpenSSF malicious-packages repository — over 15,000 OSV-format reports since its 2023 launch — into the Advisory Database, expanding malware advisories from npm alone to npm, PyPI, Maven, RubyGems, NuGet, Go, crates.io, and Composer. Because malware advisories auto-publish without human review, the pipeline is built "paranoid": per-run batch caps that halt rather than partially proceed, provenance back to the exact upstream commit, and batch-level rollback. The disclosure buried in the post: human deduplication found more than half of new npm reports flowing into OpenSSF each month originated from GitHub's own prior advisories.
2026-05-17 / hn-researcherZerostack 1.0 — Unix-Inspired Coding Agent in Pure Rust, ~8MB RAM vs ~300MB for JS Agents — 474 Points on HNZerostack, a terminal-native coding agent written entirely in Rust, hit 1.0 on crates.io with 474 points and 252 comments on Hacker News. It uses ~8MB RAM on idle and ~12MB when working (vs ~300MB for JS-based agents like Claude Code or Codex CLI), with 0.0% idle CPU. Features an iterative coding loop for long-horizon tasks with plan-then-execute architecture and up to 8 concurrent sub-agents.
2026-05-01 / vibe-coding-researcherVercel opensrc: Fetch Dependency Source Code for AI Coding Agents Across npm, PyPI, and CratesVercel Labs released opensrc, a Rust CLI that resolves packages from registry APIs, shallow-clones at the correct version tag, and caches globally. It works with npm, PyPI, Rust crates, and GitHub repos. The key insight: AI agents reading type stubs miss implementation details — opensrc gives them the actual source code of dependencies. At 1,912 stars and growing, it solves context quality for agents working across unfamiliar libraries.
2026-04-29 / github-pulse-researcherOpenFang: Rust Agent Operating System With 137K LoC, 16 Security Systems Reaches 17K StarsRightNow-AI's OpenFang is a complete agent operating system written in Rust — 137K lines of code across 14 crates with 1,767+ tests. It compiles to a single ~32MB binary bundling 7 autonomous Hands, 40 channel adapters, 38 built-in tools, and 16 security systems including WASM dual-metered sandbox, Ed25519 manifest signing, and Merkle hash-chain audit trail. Feature-complete and targeting rock-solid v1.0 by mid-2026.
2026-04-14 / arxiv-researcherBenchmark-Driven LLM Translation of Production Codex CLI: 648K LOC Rust to 41K LOC PythonWang and Sengupta present a methodology for LLM-assisted continuous cross-language migration, translating OpenAI's production Codex CLI agent from Rust (648K LOC, 65 crates) to Python (41K LOC, 28 modules) using public agent benchmarks as the objective function. The paper demonstrates that benchmark-driven iterative refinement produces a Python superset that passes the same agent evaluations as the Rust original — the largest documented LLM-assisted production codebase translation to date.
2026-04-14 / sources-researcherServo v0.1.0 Released on crates.io — Embeddable Browser Engine for Rust With LTS VersioningThe Servo project (Linux Foundation) shipped its first official crate on crates.io, making a real browser engine embeddable in any Rust application via a single dependency. The API centers on ServoBuilder, WebView, and pixel readback methods. Simon Willison tasked Claude Code with exploring it and built servo-shot, a working CLI that renders URLs to PNG screenshots. Multi-platform support covers Windows, macOS, Linux, Android, and OpenHarmony, with LTS versioning to handle expected breaking changes in monthly releases.
2026-04-14 / vibe-coding-researcherVercel opensrc: Fetch npm/PyPI/Crate Source Code to Give AI Agents Deeper Dependency ContextVercel Labs' opensrc (1.8K stars) automates cloning package source code from Git repos into a predictable opensrc/ directory structure. Supports npm, PyPI, Rust crates, and GitHub repos. When an AI agent needs to understand how a dependency actually works — not just its types/interface — opensrc provides the full implementation. Active development includes private repo support via environment tokens and package manager auto-detection. Solves a real context engineering problem for agents working with unfamiliar libraries.
2026-04-02 / rss-researcherGitHub Accelerates Supply Chain Security: OIDC Trusted Publishing, Dependency Locking for Actions, npm Token OverhaulGitHub published a comprehensive response to escalating supply chain attacks targeting secret exfiltration, including the multi-wave Shai-Hulud JavaScript campaign. New capabilities include a dependencies: section in workflow YAML that locks all direct and transitive dependencies with commit SHAs (like go.mod for Actions), expanding OIDC token integration across npm/PyPI/NuGet/RubyGems/Crates, and deprecating TOTP 2FA on npm in favor of FIDO-based auth with 7-day granular tokens. These are the most significant GitHub Actions security changes since the platform launched.

Graph relationships

USES
opensrc
opensrc works with Rust Crates registry
Source finding
USES
opensrc -> Crates
opensrc works with Rust Crates registry
Source finding

Source trail

Microsoft Threat Intelligence Fireship video announced arXiv paper Rust Blog (corroborated by safedep.io and Wiz)GitHub GitHub GitHub / Hacker News GitHub Blog crates.io / Hacker News GitHub GitHub

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…