428
400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers (cybersecuritynews.com)
submitted 5 months ago by to c/technology@lemmy.world
123 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 5 months ago (5 children)

Check again, it's around 1500+ packages now.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 2 points 5 months ago (3 children)

    How do you guys check against that list? Especially when people have so many aur packages. I simply searched the list for each package manually but I only have 5. Do you write scripts?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 5 months ago (1 child)

    So far I've just checked the diff of every package update. But with that many, I think we should maybe start using using the script provided in the article that you evidently didn't read.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •