65
Arch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attack
(www.phoronix.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 16 Jun 2026
65 points (100.0% liked)
libre
10203 readers
106 users here now
Welcome to libre
A comm dedicated to the fight for free software with an anti-capitalist perspective.
The struggle for libre computing cannot be disentangled from other forms of socialist reform. One must be willing to reject proprietary software as fiercely as they would reject capitalism. Luckily, we are not alone.
Resources
- Free Software, Free Society provides an excellent primer in the origins and theory around free software and the GNU Project, the pioneers of the Free Software Movement.
- Switch to GNU/Linux! If you're still using Windows in
$CURRENT_YEAR, take Linux Mint for a spin. If you're ready to take the plunge, flock to Debian and design your dream system!
- Those on Apple Silicon Macs can consult Asahi Linux for available options.
Rules
- Be on topic: Posts should be about free software and other hacktivst struggles. Topics about general tech news should be in the technology comm or programming comm. That doesn't mean all posts have to be serious though, memes are welcome!
- Avoid using misleading terms/speading misinformation: Here's a great article about what those words are. In short, try to avoid parroting common Techbro lingo and topics.
- Avoid being confrontational: People are in different stages of liberating their computing, focus on informing rather than accusing. Debatebro nonsense is not tolerated.
- All site-wide rules still apply
Artwork
- Xenia was meant to be an alternative to Tux and was created (licensed under CC0) by Alan Mackey in 1996.
- Comm icon (of Xenia the Linux mascot) was originally created by @ioletsgo
- Comm banner is a close up of "Dorlotons Degooglisons" by David Revoy (CC-BY 4.0) for Framasoft
founded 5 years ago
MODERATORS
I mean regular Linux package manager's are better than the AUR, which is sort of a worst case.
I'll use Debian as an example: New maintainers need their identity verified, they usually get a sponsor looking over their shoulder while they're still learning, and they get quizzed on their ability. Maybe, after jumping through these hoops, they'll be able to take over an orphaned package or two, or create a new package, which then takes weeks to propagate from "unstable" to "testing", which then takes many months to freeze into "stable", which is when most people would finally be able to install it via apt.
Meanwhile in AUR-land: Random person can just take over an orphaned package (or 1500 orphaned packages) via a fully automated process, and minutes later everybody gets to install that.