As recently discussed on the Arch Mailing list there appears to have been a large coordinated attack on the AUR some time within the last 24 hours that seems to have resulted in a rather sizable amount of packages being contaminated with malware. This is a good reminder that the AUR is open, unoffi…

This as good a place as any to close. Nothing has been added in the 2 days since the last summary; [image] cscs: The list has been static at a little less than 2k for about 36 hours .. and new AUR registrations have been closed for almost 20 hours now. The campaigns have not renewed and no …

[image] is that Luau Obfuscation xd [image] i mean for that reason those packages need to be Limited to who can write on them

Does the CachyOS gaming-meta-package install any apps from the AUR? The reason I am asking because last week my Lutris or Heroric game launcher switched to the AUR version after an update. I can’t remember which one it was. I prefer not to run any AUR apps.

Some of the packages listed in the list have quotation marks for some reason. “c+±gtk-utils-gtk2” “c+gtk-utils-gtk2” “cavestory±hb” “ls++” “notepad—bin” "notepadâ€“bin” “notepad\u2014bin” “python-pushbullet.py” Found them by cross referencing another list from HedgeDoc - Collaborative markd…

This worked for me; the initial script didn’t run here.

Or you can even run it from a local file if you don’t want to curl a random link. Copy the list from the link (or other sources), save it to a .txt file, then run: echo “Affected Packages Found:”; comm -12 (pacman -Qq | sort | psub) (sort PATH_TO_LIST.txt | psub) | { read -r l && printf ‘%s\n’ “$l”…

I have the gaming packages installed as well, and I did not see any AUR packages that I did not install myself when checking with “pacman -Qm”. None of the launchers were listed in there for me.

I have been trying to find out if i’m safe. I don’t have a lot, but paru -Qm returns that I have installed geocode-glib-2, geocode-glib-common, and python-pywalfox. I tried looking up whether those were affected and got a lot of conflicting answers. I apologize I am still rather new to CachyOs

[image] EdyMarin: Some of the packages listed in the list have quotation marks for some reason. Because they have weird characters. [image] Tazed: Does the CachyOS gaming-meta-package install any apps from the AUR? No. [image] Tazed: because last week my Lutris or Heroric game la…

Why ask an LLM instead of referencing any of the dozens of threads or articles or response repos? You are posting in a thread right now that has instructions and links. Anyways that command, as written, is bunk.

[image] Johnnii360: particularly you prohibit the AI to hallucinate Like this guy? Safety Report: AI Guardrails Do Not Work — 56-Day Proof (06K Loss, Account Destroyed) opened 08:14AM - 30 May 26 UTC (UTC) …

CachyOS Forum

AUR Compromised - Almost 2000 packages affected - 20260611

Announcements

aur

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled