4 ms·
Should note this only applies to AUR packages and `-git` mostly because of missing archive hashes. AUR packages pinned to mutable tags are easiest to hijack.
by 2bluesc 3y ago
Should note this only applies to AUR packages and `-git` mostly because of missing archive hashes.
AUR packages pinned to mutable tags are easiest to hijack.
- _emacsomancer_ 3y agoarticle notes that they "found nine vulnerable packages (in the community repository)"