Many AUR packages have been compromised - forum.tromjaro.com/t/many-aur-…

We explain how to check if you were infected.

#aur #aurexploit #linux #xfce #tromjaro #manjaro #foss #opensource #atomicarch

Many AUR packages have been compromised

You can read the entire thing here - Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit But basically it seems that hundreds of AUR packages that were not maintained in a while got “updated” with a malicious code. The motive? To steal your data. Chromium based browsers were targeted. We use Firefox for TROMjaro, so all fine. Electron Based applications - could be Element or others - plus SSH keys, known_hosts, and shell histories. Read that article for more details...

TROMjaro Forum