34
The Arch Linux AUR had over 400 packages compromised with malware (www.gamingonlinux.com)
submitted 2 months ago by [M, B] to c/gaming@lemmy.zip
3 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 2 months ago* (1 child)

This is the fourth? post I've read about it.

The AUR (Arch User Repository) consists of user-submitted content. It's equivalent to installing game.exe from somewebsite.com, so not surprising that it would be used as malware vector.

Some are suggesting Arch is being targeted due to rising popularity of the Arch-based CachyOS.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 month ago*

    Have to use paru instead of pacman to grab from aur on cachyos too and it isn't recommended, I think I only ever had blender from there since it worked better with my amd gpu than the official tar, cachyos repo, and the flatpak.

  • permalink
  • fedilink
  • source
  • parent