NPM malware and what it could imply for Cargo

One of the great features of Rust is Cargo. It downloads dependencies and compiles them into our projects. Very convenient!

However, due to the recent events surrounding an npm package containing malware, I've begun to question the security of Cargo. https://security.snyk.io/vuln/SNYK-JS-NODEIPC-2426370

Could Rust and Cargo also be vulnerable to this? Since third party packages are being downloaded, any number of them could contain malware.