Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages

https://www.phoronix.com/news/Arch-Linux-AUR-More-Than-1500?=0

41 points · 10 comments · view on lemmy.world

10 Comments

BCsven@lemmy.ca · 36 pts · 67d (4 replies)

I use Malware BTW

Maiq@piefed.social · 10 pts · 67d (2 replies)

Out of 12 installed AUR packages, I had 0 effected.

kamenlady@lemmy.world · 6 pts · 67d (1 reply)

Maybe they forgot to include the Effects™ Library?

Maiq@piefed.social · 2 pts · 67d

Doh! Not gonna change it.

snooggums@piefed.world · 6 pts · 67d

Best laugh today!

fistac0rpse@fedia.io · 8 pts · 67d

radarr, sonarr and jellyfin client are all safe, phew

Infernal_pizza@lemmy.dbzer0.com · 2 pts · 67d (3 replies)

Is this newly submitted packages which are malware, or existing packages which had malware introduced to them? And is there a list of affected packages anywhere?

diverging@piefed.social · 8 pts · 67d (1 reply)

It looks like they were existing packages.

List here: https://cscs.pastes.sh/raw/aurvulnlist20260611.txt

Got that from: https://discuss.cachyos.org/t/aur-compromised-1500-packages-affected-20260611/31040
They have a script that can check if you have any of them.

Infernal_pizza@lemmy.dbzer0.com · 4 pts · 67d

Thanks, looks like I'm ok

fistac0rpse@fedia.io · 4 pts · 66d

They're existing packages that were abandoned by the original authors and then had ownership claimed by malicious parties