106
Active AUR malicious packages incident (archlinux.org)
submitted 4 months ago by to c/linux@programming.dev
27 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 4 months ago (6 children)

This is why I prefer Flatpaks, or really any application sandboxing.

  • permalink
  • fedilink
  • source
  • hideshow 6 child comments
    •
  • [–] 6 points 4 months ago (4 children)

    AUR packages can be sandboxed with many different solutions. Any pckage can be sandboxed really.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 9 points 4 months ago* (3 children)

    This attack was executed by a script running in the PKGBUILD itself. You didn't have to run the application to be infected since just building it will infect your machine.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •