Liam @ GamingOnLinux @gamingonlinux.com · 12/06/2026The Arch Linux AUR had over 400 packages compromised with malware #Linux #ArchLinux #Securitygamingonlinux.comThe Arch Linux AUR had over 400 packages compromised with malwareLooks like the Arch Linux AUR (Arch User Repository) needs some better security and package checks - as some malicious users compromised a lot of packages. 27312135
Kab Adaephon Delat @kaboissonneault.bsky.social · 12/06/2026If anyone wants a bash script to quickly check if you have any of those installed: gist.github.com/Kidev/59bf9f... Easy to verify that it's safe to run, it just echoes if `pacman -Qi` returns anything for any of the packages listed. 2475
Cornell treats rapists better than anti-genocide protesters @asthepalacesburn.bsky.social · 12/06/2026This is why it is better to use a source based distro. 320
L @toastnotification.bsky.social · 12/06/2026I’d like to see a list of known compromised packages, personally. 170
Wobooedraggled @wobedraggled.bsky.social · 12/06/2026updated and quicker checker script here, as for me clean as a whistle... cscs.pastes.sh/aurvulntest2...cscs.pastes.sh 020
Misunderstood Specialist @msndrstdspecilist.bsky.social · 12/06/2026static.klipy.comShocked Monkey Puppet Meme ReactionAlt: Shocked Monkey Puppet Meme Reaction 021
Sythen - The White Roe 🏳️⚧️🏳️🌈 @sythen.bsky.social · 12/06/2026lists.archlinux.org/archives/lis...lists.archlinux.org AUR REPORT THREAD - Aur-general - lists.archlinux.org 010
Sp2Guzzi @sp2guzzi.bsky.social · 12/06/2026The question is how does Arch replace the compromised packages in the AUR with "clean" packages? Is there a complete listing of compromised versions? 000
Muizz @muizz.co.uk · 12/06/2026I'm curious how many of these packages have a sizable reputation score. 190
Quentin @quentinooouuuuu.bsky.social · 12/06/2026I don't know if this is related but in a lot of case, the package are not managed by the official maintainers of the software. Like, I saw someone maintaining a thousand AUR package, this is completely stupid 0140
FreeSeraphim @freeseraphim.bsky.social · 12/06/2026Now the famous i use arch is a cry of despair 1191
Frank Casgle - Le Pleurnicheur 「ベルセルク」 @r4dwu1f.bsky.social · 12/06/2026static.klipy.comWill Smith's Iconic 'NNOOOOO!!' MemeALT: Will Smith's Iconic 'NNOOOOO!!' Meme 010
Tikanjiah @tikanjiah.bsky.social · 12/06/2026I don't use the AUR on CachyOS but even if I did I would still use the same cautions and have the same mentality that I used to have on Windows, which is always assume that there's malware everywhere, ratio wise the risk is still very low on AUR compared to the general Windows population 010
DrDoorknob @drdoorknob.bsky.social · 12/06/2026“Selective upgrades?? Noo, out here we upgrade everything at once!” I know Arch users must be smarter than me as a new Cachy user but I do not understand this mentality at all. 020
Noni Cname @noni-cname.bsky.social · 12/06/2026static.klipy.comBaby Cry плачющиймальчикALT: Baby Cry плачющиймальчик 020
dan @tsivinsky.com · 12/06/2026thank you for posting this, i wouldn't see it otherwise. i had a couple of these packages but it seems like they weren't infected because i almost never update aur packages. aur_check.sh returned status "clean", hopefully im clean. 131
Fernet's last theorem @calebjk.bsky.social · 12/06/2026Discussion and tracking of packages here lists.archlinux.org/archives/lis...lists.archlinux.org AUR REPORT THREAD - Aur-general - lists.archlinux.org 010
Steve @sviscusi.bsky.social · 12/06/2026Sucks for arch and it's children. This is a nightmare scenario for them. 020
