Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages

Comments

• abc@suppo.fi ⁨3⁩ ⁨weeks⁩ ago

  Surprised it took this long to happen.

  source

  • kibblebits@quokk.au ⁨3⁩ ⁨weeks⁩ ago

    It didn’t….

    source
• HaraldvonBlauzahn@feddit.org ⁨3⁩ ⁨weeks⁩ ago

  For people that just want to install packages that are not included in the Arch distro, and don’t have the knowledge or time to review PKGBUILD files:

  Have a look into the Guix package manager. It works fine on top of Arch, and Guix has 31,000 packages now. Great for cross-language development and also suitable for early sharing of projects. npm support is a bit weak though, but packages written in Python, Rust, or functional languages are well represented.

  source
• dudesss@lemmy.ca ⁨3⁩ ⁨weeks⁩ ago

  Package installation checker

  github.com/lenucksi/aur-malware-check

  With this cool one-liner to check

  comm -1 -2 <(pacman -Qq | sort) <(curl -s https://raw.githubusercontent.com/YOUR/aur-malware-check/main/package_list.txt | sort)

  source

  • DeltaWingDragon@sh.itjust.works ⁨3⁩ ⁨weeks⁩ ago

    Is the checker also malware?

    source