A massive supply chain attack targeting the Arch User Repository (AUR) has compromised more than 400 community-maintained packages, with attackers injecting malicious build scripts designed to deploy credential-stealing malware and rootkit-style payloads on affected Linux systems.
  • Tetsuo@jlai.luEnglish
    2·
    3 hours ago

    Am I missing something ?

    Just because I have 3/4 package on my system doesn’t mean the 400+ list of affected package gets shorter on the other side…

    I’m actually pretty cautious with AUR and I only install them when there is no other options.

    • m4ylame0wecm@lemmy.zipEnglish
      2·
      2 hours ago

      Especially for a small list, 3-4, that you actually need to check, what’s the actual issue? Open list of 400, ctrl+f for the few names you care about, move on.

    • shweddy@lemmy.worldEnglish
      3·
      3 hours ago

      I was just curious because I didnt think it was so tediuous to check against an alphabetical list on a website using ctrl+f. But thats just me. It took me less than a minute to check my 8 aur packages against the list