428
400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers (cybersecuritynews.com)
submitted 5 months ago by to c/technology@lemmy.world
123 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 5 months ago* (last edited 5 months ago) (12 children)

Wow, I have 229 AUR packages installed but none of them is on the infected list!

Am I just lucky?

  • permalink
  • fedilink
  • source
  • hideshow 12 child comments
    •
  • [–] 4 points 5 months ago (5 children)

    Check again, it's around 1500+ packages now.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 2 points 5 months ago (3 children)

    How do you guys check against that list? Especially when people have so many aur packages. I simply searched the list for each package manually but I only have 5. Do you write scripts?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 5 months ago (1 child)

    So far I've just checked the diff of every package update. But with that many, I think we should maybe start using using the script provided in the article that you evidently didn't read.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 5 months ago (2 children)

    i have a few machines and lots of aur packages and none of mine have a single hit either

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •