A massive supply chain attack targeting the Arch User Repository (AUR) has compromised more than 400 community-maintained packages, with attackers injecting malicious build scripts designed to deploy credential-stealing malware and rootkit-style payloads on affected Linux systems.
  • Tetsuo@jlai.luEnglish
    1·
    4 hours ago

    I’m not home for a few days so I can’t check yet.

    But I think I have something like 3/4 packages at the most.

    But I need to compare that to a 400+ list I’m not sure I agree with you it’s that easy to do rigorously.

    • hoppolito@mander.xyzEnglish
      4·
      4 hours ago

      Not sure I understand - if you only have 3-4 packages you can just search for them specifically in the long list?

      Even if you have 50 or 100s of packages, bash makes it pretty doable

      comm -12 <(sort -u file1.txt) <(sort -u file2.txt) > common.txt

      Should spit out only the packages appearing in both lists (done by memory so may not be 100%)