169
The security situation with the Arch Linux AUR got a lot worse (www.gamingonlinux.com)
submitted 4 months ago by to c/linux@programming.dev
29 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 27 points 4 months ago (1 child)

I'd love to know what's going on with this. Arch has its haters but someone's putting a lot of effort into this

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 16 points 4 months ago

    It seems like some person with a bot just asked to maintain a bunch of orphaned packages, abusing the 2-week waiting period. Right?

    Thats why they used npm; off the shelf, almost “standard practice” credential harvesting malware. Nothing too fancy.

  • permalink
  • fedilink
  • source
  • parent