you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 5 months ago*

Probably not. The article says that most of it seems to have come from orphaned stuff in the AUR that the threat actors took ownership of via the legit process, then modified to pull down malicious NPM packages when someone went to install them.

So if your Discord package is well maintained you probably have nothing to worry about.

  • source
  • parent