Arch Linux: The AUR malicious packages incident continues to happen (www.xda-developers.com)

submitted 22 hours ago by Crumpled6273@lemmy.ca to c/keralalinux@lemmy.ca

7 comments fedilink hide all child comments

CachyOS provides many packages that are not available in the official Arch repo. But no matter what, I still prefer vanilla arch over anything else... What about you?

you are viewing a single comment's thread
view the rest of the comments

[-] Dadifer@lemmy.world 1 points 21 hours ago

How can previously installed AUR packages be compromised, though?

[-] Crumpled6273@lemmy.ca 4 points 20 hours ago

When the upstream URL gets updated with the malicious uploaders new URL. There is no warning shown in the process; the only way to check it is to inspect the PKGBUILD manually.

this post was submitted on 01 Aug 2026

9 points (100.0% liked)

Kerala Linux Community

45 readers

32 users here now

A community for Kerala Linux Users 🐧 Ask questions, share setups, and help each other.

founded 3 months ago

MODERATORS

Crumpled6273@lemmy.ca