Using pacman -Qm to check my foreign packages. None of them appear to be the ones that were compromised followed by this script from catchy OS thread: bash <(curl -s https://cscs.pastes.sh/raw/aurvulntest20260611.sh) it appears none of my packages are compromised (at least that's what I hope).
I am safu. Everything is fire. There's a better overview and update here: https://thecybersecguru.com/news/atomic-arch-aur-supply-chain-attack-ebpf-rootkit/ But suffice to say, I probably won't be updating for the time being. I got a Devuan iso so now I have to mentally debate myself if I should make the switch back to Debian based distros (For my X230T specifically, I run Mint on my desktop).
Mint is fine. Just werks for the most part. But on my laptop, I stride towards minimalist i3wm setups. I like having the ability to switch workspaces with bindings and use less than 4GB of ram on the daily.
Using pacman -Qm to check my foreign packages. None of them appear to be the ones that were compromised followed by this script from catchy OS thread: bash <(curl -s https://cscs.pastes.sh/raw/aurvulntest20260611.sh) it appears none of my packages are compromised (at least that's what I hope).
https://discuss.cachyos.org/t/aur-compromised-almost-2000-packages-affected-20260611/31040 and https://forum.garudalinux.org/t/chaotic-aur-packages-requests-recompilation-reports/26/1238?u=sunda-spirit for more info
Also reports on: https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/FGXPCB3ZVCJIV7FX323SBAX2JHYB7ZS4/
I am safu. Everything is fire. There's a better overview and update here: https://thecybersecguru.com/news/atomic-arch-aur-supply-chain-attack-ebpf-rootkit/ But suffice to say, I probably won't be updating for the time being. I got a Devuan iso so now I have to mentally debate myself if I should make the switch back to Debian based distros (For my X230T specifically, I run Mint on my desktop).
im safe ๐ช we cant let windows users know that this happened, we'll never hear the end of it
I've been tempted to try something besides mint for a long time but I just cant justify that
Mint is fine. Just werks for the most part. But on my laptop, I stride towards minimalist i3wm setups. I like having the ability to switch workspaces with bindings and use less than 4GB of ram on the daily.