Egregoros

@kaia openbsd girl fuck the middlemen

also it's not too bad those random ass aur packages got compromised there's thousands of them

not saying don't worry but like. are there any in the list you even use? this shit appens all the time.

@monkey where can i see a list of the compromised packages? i didn't see any

checking openbsd

@kaia @monkey https://gist.github.com/Kidev/85756c3dcad3623ca5604a8135bafd14

@kaia if you have read the arch wiki, they suggest not to use the AUR unless you really have to, for that exact reason. packages can be compromised there. also npm is ass, that's where a lot of compromised packages come from.

so even if you use arch and use only the arch repos and avoid the AUR, you'll be fine.

@Inginsub @kaia

hecking 1617 known infected packages...

Clean: none of the known infected packages are installed.

we're so back. I figured it's random ass small packages based on the size of the AUR.

@gettie @kaia You are supposed to read update diffs for specifically this reason.

@phnt @gettie @kaia This. Also, "current -> orphaned -> new maintainer" should ring bright red alerts for any existing packages on your system. Depending on the helper you use.