150
Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware (www.phoronix.com)
submitted 3 months ago by to c/technology@lemmy.world
28 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 3 months ago (2 children)

I wish it was that simple but I doubt there is any scanner that can differentiate between legitimate and malicious code.

Maybe an AI but even then it would probably be quite unreliable.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 3 months ago (1 child)

    Unreliable is still a step up from completely absent.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 4 points 3 months ago

    Maybe. But an unreliable scanner means a human has to check all the false positives and false negatives which can quickly take a lot of time for projects that are run by benevolent devs.

    It's really important to keep in mind this is done for free and that supply chain attacks like this one are very hard to identify.

    I mean this is usually not the devs being careless, it's very complex attacks on projects with very limited ressources. Attackers even sometimes choose purposefully projects that are "understaffed" (well, more understaffed than others).

  • permalink
  • fedilink
  • source
  • parent