41
Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages (www.phoronix.com)
submitted 4 months ago by to c/arch@programming.dev
10 comments fedilink hide all child comments

all 10 comments

sorted by: hot top controversial new old
[–] 36 points 4 months ago (4 children)

I use Malware BTW

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
    • [–] 8 points 4 months ago

    radarr, sonarr and jellyfin client are all safe, phew

  • permalink
  • fedilink
  • source
    •
    [–] 2 points 4 months ago (3 children)

    Is this newly submitted packages which are malware, or existing packages which had malware introduced to them? And is there a list of affected packages anywhere?

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] 8 points 4 months ago (1 child)

    It looks like they were existing packages.

    List here: https://cscs.pastes.sh/raw/aurvulnlist20260611.txt

    Got that from: https://discuss.cachyos.org/t/aur-compromised-1500-packages-affected-20260611/31040
    They have a script that can check if you have any of them.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •