you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 1 month ago

That wouldn't have fixed the AUR incident because the attacker updated the PKGBUILD which is roughly the same as the nixfile. And there are no packages provided by the AUR, just PKGBUILDs. You always build the package yourself locally.

  • source
  • parent