Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages

https://www.phoronix.com/news/Arch-Linux-AUR-More-Than-1500

42 points · 4 comments · view on lemmy.world

4 Comments

abc@suppo.fi · 5 pts · 52d (1 reply)

Surprised it took this long to happen.

kibblebits@quokk.au · 3 pts · 52d
[ removed ]
dudesss@lemmy.ca · 2 pts · 51d (1 reply)

Package installation checker

https://github.com/lenucksi/aur-malware-check

With this cool one-liner to check

comm -1 -2 <(pacman -Qq | sort) <(curl -s https://raw.githubusercontent.com/YOUR/aur-malware-check/main/package_list.txt | sort)

DeltaWingDragon@sh.itjust.works · 1 pts · 50d

Is the checker also malware?

HaraldvonBlauzahn@feddit.org · 2 pts · 51d

For people that just want to install packages that are not included in the Arch distro, and don't have the knowledge or time to review PKGBUILD files:

Have a look into the Guix package manager. It works fine on top of Arch, and Guix has 31,000 packages now. Great for cross-language development and also suitable for early sharing of projects. npm support is a bit weak though, but packages written in Python, Rust, or functional languages are well represented.