What precautions does the crates registry have against malicious supply chain attacks?

In light of the recent node-ipc fiasco, I'm left wondering what precautions are put in place to prevent a crate author to go rogue and implant ransomware/adware etc on users' systems. Now that Rust is on its way to mainline Linux, the question is even more important.