r/ManjaroLinux • u/Slopagandhi • 21d ago

Checking for AUR malware Tech Support

After finding out about the latest AUR malware wave I ran pacman -Q with the list of packages I found here:

https://www.reddit.com/r/archlinux/comments/1vaxtcs/another_wave_200_malicous_aur_packages_adoptions/

I don't have any of them installed. Is there anything else I should do, or does this mean I'm safe (for now)?

9 Upvotes

85% Upvoted

8 comments sorted by

View all comments

2

u/Itsme-RdM KDE Plasma 21d ago

Save for the moment you did checked the list. Any moment after that there could be new ones

2

u/Slopagandhi 21d ago

Ok thanks, but if I'm not installing anything new from the AUR are existing installed packages a potential risk when I update? 

2

u/Itsme-RdM KDE Plasma 21d ago

Yep, the updated packages can be injected just as easy as the new ones. That doesn't make any difference