Virual@lemmy.dbzer0.com to Linux@lemmy.mlEnglish · 4 days agoArch Linux's AUR Sees More Than 400 Packages Compromised With Malwarewww.phoronix.comexternal-linkmessage-square85linkfedilinkarrow-up1226arrow-down10cross-posted to: technology@lemmy.worldlinux@lemmy.worldarchlinux@lemmy.mlcybersecurity@infosec.pubtechnology@hexbear.netarch@programming.devlinux@sopuli.xyzhackernews@lemmy.bestiver.sesecurity@lemmy.ml
arrow-up1226arrow-down1external-linkArch Linux's AUR Sees More Than 400 Packages Compromised With Malwarewww.phoronix.comVirual@lemmy.dbzer0.com to Linux@lemmy.mlEnglish · 4 days agomessage-square85linkfedilinkcross-posted to: technology@lemmy.worldlinux@lemmy.worldarchlinux@lemmy.mlcybersecurity@infosec.pubtechnology@hexbear.netarch@programming.devlinux@sopuli.xyzhackernews@lemmy.bestiver.sesecurity@lemmy.ml
minus-squarechgxvjh [he/him, comrade/them]@hexbear.netlinkfedilinkEnglisharrow-up2·4 days ago EDIT: https://archlinux.org/news/active-aur-malicious-packages-incident/ They did it, an official message. I wish they’d actually explain their findings/attack vectors so that people have a chance to stay ahead of this by reading the PKGBUILDs as recommended.
I wish they’d actually explain their findings/attack vectors so that people have a chance to stay ahead of this by reading the PKGBUILDs as recommended.