Hackers compromise Rust crate arrayref to inject malware

The attack involved injecting a dependency on a malicious package, proc-macro1, which impersonated the popular proc-macro2 crate.