RetroFed Forum
Your home away from modern life.
Search Categories Forum list Register Log in
About RetroFed
RetroFed

Welcome to the nostalgia-filled piefed instance of yesteryear.

Open Registration with Application questionnaire.

If you have a question or comment you can post in !meta@retrofed.com or message @DosDude@retrofed.com or @Die4Ever@retrofed.com

In case of downtime and/or emergency, we will post updates on @DosDude@mastodon.social

Some rules we try to uphold:

  • Be civil. Bigotry is not welcome. This includes (but is not limited to): transphobia, queerphobia, racism, ageism and ableism. We do not promote hate.
  • Communities need to be Retro or Retro-adjacent.
  • Please don't upload pornographic content. (use an external image host for that)
73 registered users
Administrators: DosDude, Die4Ever
Visit retrofed.com
Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages
Post Reply RetroFed Forum Forum Index » Arch Linux
AuthorMessage
cm0002 europe.pub cm0002@europe.pub
Joined: 2025-11-06
Quote

Link: https://www.phoronix.com/news/Arch-Linux-AUR-More-Than-1500?=0
41   Original
BCsven lemmy.ca BCsven@lemmy.ca
Joined: 2023-06-17
#2 · Quote Reply

I use Malware BTW
36
snooggums piefed.world snooggums@piefed.world
Joined: 2025-07-08
#3 · Quote Reply
BCsven wrote:
I use Malware BTW

Best laugh today!
6
Maiq piefed.social Maiq@piefed.social
Joined: 2025-07-09
#4 · Quote Reply
BCsven wrote:
I use Malware BTW

Out of 12 installed AUR packages, I had 0 effected.
10
kamenlady lemmy.world kamenlady@lemmy.world
Joined: 2023-06-24
#5 · Quote Reply
Maiq wrote:
Out of 12 installed AUR packages, I had 0 effected.

Maybe they forgot to include the Effects™ Library?
6
fistac0rpse fedia.io fistac0rpse@fedia.io
Joined: 2024-06-11
#6 · Quote Reply

radarr, sonarr and jellyfin client are all safe, phew
8
Maiq piefed.social Maiq@piefed.social
Joined: 2025-07-09
#7 · Quote Reply
kamenlady wrote:
Maybe they forgot to include the Effects™ Library?

Doh! Not gonna change it.
2
Infernal_pizza lemmy.dbzer0.com Infernal_pizza@lemmy.dbzer0.com
Joined: 2025-06-04
#8 · Quote Reply

Is this newly submitted packages which are malware, or existing packages which had malware introduced to them? And is there a list of affected packages anywhere?
2
diverging piefed.social diverging@piefed.social
Joined: 2025-06-04
#9 · Quote Reply
Infernal_pizza wrote:
Is this newly submitted packages which are malware, or existing packages which had malware introduced to them? And is there a list of affected packages anywhere?

It looks like they were existing packages.

List here: https://cscs.pastes.sh/raw/aurvulnlist20260611.txt

Got that from: https://discuss.cachyos.org/t/aur-compromised-1500-packages-affected-20260611/31040
They have a script that can check if you have any of them.
8
Infernal_pizza lemmy.dbzer0.com Infernal_pizza@lemmy.dbzer0.com
Joined: 2025-06-04
#10 · Quote Reply
diverging wrote:
It looks like they were existing packages. List here: https://cscs.pastes.sh/raw/aurvulnlist20260611.txt Got that from: https://discuss.cachyos.org/t/aur-compromised-1500-packages-affected-20260611/31040 They have a script that can check if you have any of them.

Thanks, looks like I'm ok
4
fistac0rpse fedia.io fistac0rpse@fedia.io
Joined: 2024-06-11
#11 · Quote Reply
Infernal_pizza wrote:
Is this newly submitted packages which are malware, or existing packages which had malware introduced to them? And is there a list of affected packages anywhere?

They're existing packages that were abandoned by the original authors and then had ownership claimed by malicious parties
4
Post Reply
Back to top
Powered by PieFed · PieBB frontend · All times are Europe/Amsterdam