c/arch · by cm0002@europe.pub · 67dArch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages https://www.phoronix.com/news/Arch-Linux-AUR-More-Than-1500?=041 points · 10 comments · view on lemmy.world
10 Comments
BCsven@lemmy.ca · 36 pts · 67d
I use Malware BTW
Maiq@piefed.social · 10 pts · 67d
Out of 12 installed AUR packages, I had 0 effected.
kamenlady@lemmy.world · 6 pts · 67d
Maybe they forgot to include the Effects™ Library?
Maiq@piefed.social · 2 pts · 67d
Doh! Not gonna change it.
snooggums@piefed.world · 6 pts · 67d
Best laugh today!
fistac0rpse@fedia.io · 8 pts · 67d
radarr, sonarr and jellyfin client are all safe, phew
Infernal_pizza@lemmy.dbzer0.com · 2 pts · 67d
Is this newly submitted packages which are malware, or existing packages which had malware introduced to them? And is there a list of affected packages anywhere?
diverging@piefed.social · 8 pts · 67d
It looks like they were existing packages.
List here: https://cscs.pastes.sh/raw/aurvulnlist20260611.txt
Got that from: https://discuss.cachyos.org/t/aur-compromised-1500-packages-affected-20260611/31040
They have a script that can check if you have any of them.
Infernal_pizza@lemmy.dbzer0.com · 4 pts · 67d
Thanks, looks like I'm ok
fistac0rpse@fedia.io · 4 pts · 66d
They're existing packages that were abandoned by the original authors and then had ownership claimed by malicious parties