Virual@lemmy.dbzer0.com to Linux@lemmy.mlEnglish · 3 months agoArch Linux's AUR Sees More Than 400 Packages Compromised With Malwarewww.phoronix.comexternal-linkmessage-square78fedilinkarrow-up1270cross-posted to: cybersecurity@infosec.publinux@lemmy.worldtechnology@lemmy.worldarchlinux@lemmy.ml
arrow-up1270external-linkArch Linux's AUR Sees More Than 400 Packages Compromised With Malwarewww.phoronix.comVirual@lemmy.dbzer0.com to Linux@lemmy.mlEnglish · 3 months agomessage-square78fedilinkcross-posted to: cybersecurity@infosec.publinux@lemmy.worldtechnology@lemmy.worldarchlinux@lemmy.ml
minus-squarechgxvjh [comrade/them, he/him]@hexbear.netlinkfedilinkEnglisharrow-up2·3 months agoI don’t think it’s immediately obvious that the PKGBUILD installing some shit with npm is malware.
minus-squareAatube@kbin.melroy.orglinkfedilinkarrow-up2·3 months agoit’s bypassing the normal place to download (in the PKGBUILD) and doing so in a place that’s unsandboxed instead (in the .install file, not the PKGBUILD) when it didn’t need to do that before
I don’t think it’s immediately obvious that the PKGBUILD installing some shit with npm is malware.
it’s bypassing the normal place to download (in the PKGBUILD) and doing so in a place that’s unsandboxed instead (in the .install file, not the PKGBUILD) when it didn’t need to do that before