this post was submitted on 12 Jun 2026
174 points (99.4% liked)

Linux

13976 readers
408 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago
MODERATORS
Ategon@programming.dev
anzo@programming.dev
dwraf_of_ignorance@programming.dev
174
Arch Linux AUR Malware Campaign Hits Multiple User-Contributed Packages (linuxiac.com)
submitted 3 days ago by cm0002@lemy.lol to c/linux@programming.dev
69 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[โ€“] Bananskal@nord.pub 2 points 2 days ago* (last edited 2 days ago) (1 children)

paru shows you the PKGBUILD diffs on upgrade, so you can review then and deny upgrades.

But realistically I am not going to go into the code itself on my installed packages to check for malware or other types of attacks. That's too time consuming for my risk level, and requires more knowledge than can be expected, to be honest.

Edit: but maybe you're talking about when first installing a package? Come to think of it, I'm not sure it shows the PKGBUILD at that point. ๐Ÿค”

[โ€“] nlgranger@lemmy.world 1 points 2 days ago

It does, the diff shows the full files.