you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 4 months ago (3 children)

Is this newly submitted packages which are malware, or existing packages which had malware introduced to them? And is there a list of affected packages anywhere?

  • source
  • hideshow 3 child comments
  • [–] 8 points 4 months ago (1 child)

    It looks like they were existing packages.

    List here: https://cscs.pastes.sh/raw/aurvulnlist20260611.txt

    Got that from: https://discuss.cachyos.org/t/aur-compromised-1500-packages-affected-20260611/31040
    They have a script that can check if you have any of them.

  • source
  • parent
  • hideshow 1 child comment