Linux

14576 readers

513 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

105

Active AUR malicious packages incident (archlinux.org)

submitted 1 month ago by nemeski@mander.xyz to c/linux@programming.dev

27 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] Equinox1289@sh.itjust.works 6 points 1 month ago (6 children)

This is why I prefer Flatpaks, or really any application sandboxing.

[–] 9tr6gyp3@lemmy.world 6 points 1 month ago (4 children)

AUR packages can be sandboxed with many different solutions. Any pckage can be sandboxed really.

[–] defaultusername@lemmy.dbzer0.com 9 points 1 month ago* (last edited 1 month ago) (3 children)

This attack was executed by a script running in the PKGBUILD itself. You didn't have to run the application to be infected since just building it will infect your machine.

[–] patlefort@lemmy.world 2 points 1 month ago

It also had an install script that will be run as root when the package is installed. Can't sandbox that.

load more comments (2 replies)

load more comments (3 replies)