Rust arrayref 0.3.10 crate installs malware