Linux

13955 readers

583 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

216

Arch Linux AUR Malware Campaign Hits Multiple User-Contributed Packages (linuxiac.com)

submitted 1 day ago by cm0002@lemy.lol to c/linux@programming.dev

63 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] dream_weasel@sh.itjust.works 19 points 15 hours ago (1 children)

Ah yes, review the PKGBUILD for every AUR update. Luckily I do this while I'm rereading the ToS every time those get changed for all my software as well.

When I finish that I intend to read the changelog in git for each of the commits since the last update.

[–] FiniteBanjo@programming.dev 6 points 9 hours ago

I always check with my contract lawyer before installing or updating from the AUR. It's worth it for me.