274
Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages (www.phoronix.com)
submitted 4 months ago by to c/technology@lemmy.world
33 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 74 points 4 months ago (8 children)

I've seen AUR warned against often, also by Arch team members.
I never thought it was a huge deal, but apparently anything that can be attacked will be attacked nowadays.

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [–] 13 points 4 months ago (3 children)

    I start to wonder if we need something sitting between extra and aur, few more trusted maintainers and well secured update process that’s more than the aur Wild West

    Also, some sort of yay hook to do some scanning for suspicious diffs and warning or skipping those packages…

    I don’t want / need a system where I can blindly update everything, but something to help me avoid having to visually check every package diff would be nice

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
    • load more comments (1 reply)