All this talk about #Linux #malware / #spyware / #ransomware in the news is making #Linux itself sound unsafe, so I guess I'll post some info. First of all, only #AUR (Arch User Repository) is affected, meaning only #Arch users need to worry, and only if they have downloaded updates for the specific abandoned packages in the past month or so when the attack began. Everyone on non-Arch distributions is safe, everyone on #Cachy, #SteamOS, and #Endeavor who isn't actively using AUR is safe, only people who actively downloaded recent versions of specific packages from this specific repository are affected.
Linux is still Safe for virtually all users.
Ironically, #Microsoft may be partially to blame for this, as a chunk of the issue is #GitHub projects being taken over, and the amount of Vibecode slop that's overwhelming the people who normally check for this.
But remember, AUR is not some niche or abandoned project: there are hundreds of experts all around the world - from NATO governments to megacorporations to major #OpenSource leaders - actively trying to mitigate and solve this problem from every angle. It will be handled eventually, and we'll come out more resilient for it.
In the meantime, if you're on Arch... Just don't bulk-update your AUR packages. Run #Pacman and #Flatpak's System Update, and don't mess with AUR unless you need something from it, and look it over when you do, which should be standard behavior anyway.
You should already have an #Antivirus setup, like ClamAV, but also, someone made a script which checks if you have anything from the list of known packages too...
https://gist.githubusercontent.com/Kidev/85756c3dcad3623ca5604a8135bafd14/raw/8672469f7f6400b11143ccad57296a85886b4226/check_aur_infected.sh
#OpenSource #Cybersecurity