Karna@lemmy.ml to Linux@lemmy.ml · 11 days agoArch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Haltedwww.phoronix.comexternal-linkmessage-square68linkfedilinkarrow-up1197arrow-down13cross-posted to: archlinux@lemmy.ml
arrow-up1194arrow-down1external-linkArch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Haltedwww.phoronix.comKarna@lemmy.ml to Linux@lemmy.ml · 11 days agomessage-square68linkfedilinkcross-posted to: archlinux@lemmy.ml
minus-squareAsonyxi@sh.itjust.workslinkfedilinkarrow-up5arrow-down1·10 days agoMan I feel like I dodged a bullet switching to Fedora right before this AUR fuckery started to happen…
minus-squaredarkstar@sh.itjust.workslinkfedilinkEnglisharrow-up1·4 days agoSame. I was on Cachy for a few months but recently switched back to Fedora. I’m sleeping very peacefully.
minus-squaremotruck@lemmy.ziplinkfedilinkarrow-up11·10 days agoYou don’t have to use AUR to use Arch. Just like PPA for Ubuntu or Fedora’s Copr.
minus-squareScrollone@feddit.itlinkfedilinkarrow-up1·9 days agoI wonder if Ubuntu PPAs are also compromised
minus-squaremotruck@lemmy.ziplinkfedilinkarrow-up2·9 days agoThe chances malicious packages live in PPA now is quite high. Perhaps their adoption procedures are not conducive to the same type of attack AUR is experiencing.
minus-squarechortle_tortle@mander.xyzlinkfedilinkarrow-up1·8 days agoSure, but as a user it seems like a non-trivial number of packages are only on the AUR vs other distros.
Man I feel like I dodged a bullet switching to Fedora right before this AUR fuckery started to happen…
Same. I was on Cachy for a few months but recently switched back to Fedora. I’m sleeping very peacefully.
You don’t have to use AUR to use Arch. Just like PPA for Ubuntu or Fedora’s Copr.
I wonder if Ubuntu PPAs are also compromised
The chances malicious packages live in PPA now is quite high. Perhaps their adoption procedures are not conducive to the same type of attack AUR is experiencing.
Sure, but as a user it seems like a non-trivial number of packages are only on the AUR vs other distros.