`arone` was removed from crates.io due to malicious code

We identified that `arone` contained malicious code executed through a build
script.

This crate had 7 versions, with the most recent one being published at
2026-08-18. The crate was removed from crates.io on 2026-08-20 and the user
account was locked.

This crate was used as part of a malware campaign targeted at users of
`arrayref`, which was downloaded 2,285 times before being removed; see
[the `arrayref` advisory][arrayref-advisory] for more detail.

[arrayref-advisory]: https://rustsec.org/advisories/RUSTSEC-2026-0260.html