Karna@lemmy.ml to Linux@lemmy.ml · 3 days agoArch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Haltedwww.phoronix.comexternal-linkmessage-square58linkfedilinkarrow-up10arrow-down10
arrow-up10arrow-down1external-linkArch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Haltedwww.phoronix.comKarna@lemmy.ml to Linux@lemmy.ml · 3 days agomessage-square58linkfedilink
minus-squareAsonyxi@sh.itjust.workslinkfedilinkarrow-up0·2 days agoMan I feel like I dodged a bullet switching to Fedora right before this AUR fuckery started to happen…
minus-squaremotruck@lemmy.ziplinkfedilinkarrow-up0·1 day agoYou don’t have to use AUR to use Arch. Just like PPA for Ubuntu or Fedora’s Copr.
minus-squareScrollone@feddit.itlinkfedilinkarrow-up0·1 day agoI wonder if Ubuntu PPAs are also compromised
minus-squaremotruck@lemmy.ziplinkfedilinkarrow-up0·1 day agoThe chances malicious packages live in PPA now is quite high. Perhaps their adoption procedures are not conducive to the same type of attack AUR is experiencing.
Man I feel like I dodged a bullet switching to Fedora right before this AUR fuckery started to happen…
You don’t have to use AUR to use Arch. Just like PPA for Ubuntu or Fedora’s Copr.
I wonder if Ubuntu PPAs are also compromised
The chances malicious packages live in PPA now is quite high. Perhaps their adoption procedures are not conducive to the same type of attack AUR is experiencing.