this post was submitted on 12 Jun 2026
176 points (99.4% liked)

Linux

14468 readers
182 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago
MODERATORS
Ategon@programming.dev
anzo@programming.dev
dwraf_of_ignorance@programming.dev
176
Arch Linux AUR Malware Campaign Hits Multiple User-Contributed Packages (linuxiac.com)
submitted 1 month ago by cm0002@lemy.lol to c/linux@programming.dev
67 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[โ€“] Bananskal@nord.pub 2 points 1 month ago* (last edited 1 month ago) (1 children)

paru shows you the PKGBUILD diffs on upgrade, so you can review then and deny upgrades.

But realistically I am not going to go into the code itself on my installed packages to check for malware or other types of attacks. That's too time consuming for my risk level, and requires more knowledge than can be expected, to be honest.

Edit: but maybe you're talking about when first installing a package? Come to think of it, I'm not sure it shows the PKGBUILD at that point. ๐Ÿค”

[โ€“] nlgranger@lemmy.world 1 points 1 month ago

It does, the diff shows the full files.