Over 900 Arch Linux Packages Infected with infostealers and rootkits

ffortran77 about 3 hours ago 2 commentsRead Article on lists.archlinux.org

ZH version is available. Content is displayed in original English for accuracy.

Discussion (2 Comments)Read Original on HackerNews

WalterGR•25 minutes ago

https://news.ycombinator.com/item?id=48500447

“AUR packages compromised with Infostealer and Rootkit” (ifin.network)

257 points | 15 hours ago | 189 comments

mdlxxv•about 3 hours ago

Very misleading title. AUR "recipes" are NOT official Arch Linux packages. Basically anyone can upload stuff to the AUR. Users are expected to read and understand the AUR PKGBUILDs before trying to build them.