instead the downloaded malicious code runs in prod. maybe, if you are lucky, it does something strange in CI and you can catch it.

the only real solution is a reputation system (like https://github.com/crev-dev/cargo-crev ), which of course is unfortunately barely used