#arch-linux

400 AUR packages compromised, or why I stopped trusting build scripts

The Arch User Repository just had 400 packages backdoored. The attack vector was not clever. It was obvious, predictable, and it worked anyway.

Read post ↗