Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads

[NEU] [mittel] Composer: Mehrere Schwachstellen

CVE-2026-5223 Crates in third party registries can override the cached source of other crates

Set up automated dependency scanning after the recent npm/PyPI supply chain attacks