A massive supply chain attack targeting the Arch User Repository (AUR) has compromised more than 400 community-maintained packages, with attackers injecting malicious build scripts designed to deploy credential-stealing malware and rootkit-style payloads on affected Linux systems.
  • malloc@lemmy.worldEnglish
    6·
    5 months ago

    Is this the first time AUR has been compromised to this degree?

    Given how changes are often unvetted, I am surprised this hasn’t occurred before.

    • De Lancre@lemmy.worlddeleted by creatorEnglish
      4·
      5 months ago

      Is this the first time AUR has been compromised to this degree?

      I do believe so, yes. There was couple of cases in last year, but never to this extend. If I understand correctly, reading arch thread, it something to do with the fact that anyone can “adopt” orphaned package on AUR. Which is kinda wild.

    • tempest@lemmy.caEnglish
      31·
      5 months ago

      A lot of the AUR is just build scripts for GitHub repos …