3 ms·
Exactly. It's actually kind of a success story for the AUR, since they found the malware so quickly. Of course, it would be more interesting if we could scan
by xiii1408 8y ago
Exactly. It's actually kind of a success story for the AUR, since they found the malware so quickly.
Of course, it would be more interesting if we could scan or survey the AUR to get a percentage of suspicious packages. I've long been under the impression that some popular AUR packages (e.g. Google Chrome) are pretty safe from tampering. For anything else, I glance over the PKGBUILD to make sure it's not doing anything obviously fishy, and I've never noticed anything.