A massive supply chain attack targeting the Arch User Repository (AUR) has compromised more than 400 community-maintained packages, with attackers injecting malicious build scripts designed to deploy credential-stealing malware and rootkit-style payloads on affected Linux systems.
    • Tetsuo@jlai.luEnglish
      2·
      3 hours ago

      Am I missing something ?

      Just because I have 3/4 package on my system doesn’t mean the 400+ list of affected package gets shorter on the other side…

      I’m actually pretty cautious with AUR and I only install them when there is no other options.

      • m4ylame0wecm@lemmy.zipEnglish
        2·
        2 hours ago

        Especially for a small list, 3-4, that you actually need to check, what’s the actual issue? Open list of 400, ctrl+f for the few names you care about, move on.

      • shweddy@lemmy.worldEnglish
        3·
        3 hours ago

        I was just curious because I didnt think it was so tediuous to check against an alphabetical list on a website using ctrl+f. But thats just me. It took me less than a minute to check my 8 aur packages against the list