• nyan@lemmy.cafe
    link
    fedilink
    English
    arrow-up
    14
    ·
    12 hours ago

    You’re pretty much only at risk on this one if you’re doing Javascript development or running a server. The popular Javascript and Python library repos seem to get successfully attacked a couple of times a year each.

    Linux main distro repos haven’t been reporting any significant breaches. You should be okay to update your system (but if you’re on Arch or one of its downstreams, maybe steer clear of AUR packages for now).

    • starblursd@lemmy.zip
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 hours ago

      Yea I use like 2 or 3 things from aur and they’re maintained by the developer… the recent aur attacks haven’t worried me a bit

    • jsnfwlr@lemmy.ml
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 hours ago

      That’s true as long as none of the apps you use as a user have the compromised packages bundled with them…