Okay, where is an updated remediation script?
post
I wonder if this will give them reason to consider an ML tool or something like crowdstrike to scan the repo.
replies:
10 comments in c/arch@programming.dev view that post
I use Malware BTW
replies:
permalink
fedilink
source
parent
hideshow 2 child comments
Out of 12 installed AUR packages, I had 0 effected.
Is this newly submitted packages which are malware, or existing packages which had malware introduced to them? And is there a list of affected packages anywhere?
replies:
permalink
fedilink
source
parent
hideshow 1 child comment
permalink
fedilink
source
parent
It looks like they were existing packages.
List here: https://cscs.pastes.sh/raw/aurvulnlist20260611.txt
Got that from: https://discuss.cachyos.org/t/aur-compromised-1500-packages-affected-20260611/31040
They have a script that can check if you have any of them.
They're existing packages that were abandoned by the original authors and then had ownership claimed by malicious parties
all 13 comments