A massive supply chain attack targeting the Arch User Repository (AUR) has compromised more than 400 community-maintained packages, with attackers injecting malicious build scripts designed to deploy credential-stealing malware and rootkit-style payloads on affected Linux systems.
  • niva@discuss.tchncs.deEnglish
    3·
    2 days ago

    Wow, I have 229 AUR packages installed but none of them is on the infected list!

    Am I just lucky?

    • niva@discuss.tchncs.deEnglish
      1·
      9 hours ago

      I just checked the new list with 1937 infected packages, not a single match. Again, am I just lucky or are all these 1937 packages barely used by people?

      • onnekas@sopuli.xyzEnglish
        2·
        2 days ago

        How do you guys check against that list? Especially when people have so many aur packages. I simply searched the list for each package manually but I only have 5. Do you write scripts?

        • flying_sheep@lemmy.mlEnglish
          2·
          2 days ago

          So far I’ve just checked the diff of every package update. But with that many, I think we should maybe start using using the script provided in the article that you evidently didn’t read.

          • onnekas@sopuli.xyzEnglish
            1·
            2 days ago

            I read another article before which did not mention the script but only listed all affected packages. So yeah I should read this article :)

    • texture@lemmy.worldEnglish
      2·
      2 days ago

      i have a few machines and lots of aur packages and none of mine have a single hit either

      • niva@discuss.tchncs.deEnglish
        1·
        9 hours ago

        Same here. Just checked against the new list with 1937 packages and still don’t have a match.