240
Arch Linux AUR Malware Campaign Hits Multiple User-Contributed Packages (linuxiac.com)
submitted 2 weeks ago by cm0002@lemy.lol to c/linux@programming.dev
71 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[-] dream_weasel@sh.itjust.works 27 points 2 weeks ago

Ah yes, review the PKGBUILD for every AUR update. Luckily I do this while I'm rereading the ToS every time those get changed for all my software as well.

When I finish that I intend to read the changelog in git for each of the commits since the last update.

[-] FiniteBanjo@programming.dev 10 points 2 weeks ago

I always check with my contract lawyer before installing or updating from the AUR. It's worth it for me.

this post was submitted on 12 Jun 2026
240 points (99.6% liked)

Linux

14112 readers
272 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago
MODERATORS
Ategon@programming.dev
anzo@programming.dev
dwraf_of_ignorance@programming.dev