ITSECURITY.GURU WHAT HAPPENED · DOES IT AFFECT YOU · WHAT TO DO
Board › Wire › Help Net Security
Threats

Fake Arch Linux AUR packages exploit typos to run malware with root privileges

Illustration · Supply chain

Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community package source for Arch Linux and related distributions, hosting user-submitted build scripts for proprietary programs, be

Continue reading at Help Net Security →