LOL

They're existing packages that were abandoned by the original authors and then had ownership claimed by malicious parties

Thanks, looks like I'm ok

It looks like they were existing packages.

List here: https://cscs.pastes.sh/raw/aurvulnlist20260611.txt

Got that from: https://discuss.cachyos.org/t/aur-compromised-1500-packages-affected-20260611/31040
They have a script that can check if you have any of them.

Is this newly submitted packages which are malware, or existing packages which had malware introduced to them? And is there a list of affected packages anywhere?

Doh! Not gonna change it.

radarr, sonarr and jellyfin client are all safe, phew

Maybe they forgot to include the Effects™ Library?

Out of 12 installed AUR packages, I had 0 effected.

Best laugh today!

I use Malware BTW

If it worries you that much and you don't have time to search your AUR packages one at a time, you could always run yay -R $(pacman -Qmq) to remove them all at once.

Arrrggghhh feck. this looks bad.

Thanks, would be cool to hear how it goes :)

This is probably a good start https://codeberg.org/konform-browser/arch

There's another contributor helping out with arch packaging. Expecting an update shortly there which makes it more idiomatic for arch (fetching and verifying firefox sources directly with makepkg instead of inside the build script). Nothing that we expect to cause any snags for you but just FYI!

Update: Pre-built packages for Debian/Ubuntu (.deb), Fedora/SUSE (.rpm) and others are now built and published by Codeberg CI for each release:

https://codeberg.org/konform-browser/source/releases

On Android: Been looking a bit at that but right now it's likely not happening in public anytime soon unless someone else jumps in and starts driving it hint hint

Hope it works for you and that we meet again on Codeberg!

Thank you for sharing!

Very timely. The userconfig prefs look a lot like what I have myself and I was just the other day struggling with getting aur icecat to build. Will give it a spin!

I don‘t suppose you are considering getting builds running for Android APKs? IronFox needs some competition..

Thanks
Reminders are just what I needed.
The interactive part would just have been a bonus.