this post was submitted on 04 Aug 2026
70 points (98.6% liked)
Technology
86866 readers
3519 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Jesus... Here we go again.. as a normal Linux user non dev, do I just not update my PC for now? Until it's known what devs may be compromised downstream?
You're pretty much only at risk on this one if you're doing Javascript development or running a server. The popular Javascript and Python library repos seem to get successfully attacked a couple of times a year each.
Linux main distro repos haven't been reporting any significant breaches. You should be okay to update your system (but if you're on Arch or one of its downstreams, maybe steer clear of AUR packages for now).
Yea I use like 2 or 3 things from aur and they're maintained by the developer.. the recent aur attacks haven't worried me a bit
That's true as long as none of the apps you use as a user have the compromised packages bundled with them...