Malware Found in Arch Linux AUR Package Repository

guest · Jul 10, 2018

Malware Found in Arch Linux AUR Package Repository
July 10, 2018
https://www.bleepingcomputer.com/news/security/malware-found-in-arch-linux-aur-package-repository/

Malware has been discovered in at least three Arch Linux packages available on AUR (Arch User Repository), the official Arch Linux repository of user-submitted packages.

The malicious code has been removed thanks to the quick intervention of the AUR team.
Info-stealer found in "acroread" Arch Linux package
The incident happened because AUR allows anyone to take over "orphaned" repositories that have been abandoned by their original authors.
Two other yet-to-be-named packages also found infected
The AUR team also said it found similar code in two other packages that the xeactor user has recently taken over, but has not revealed their names.

All malicious changes to all three packages have now been reversed, and xeactor's account has been suspended.
Click to expand...

Log in or Sign up

Malware Found in Arch Linux AUR Package Repository

guest Guest

Log in or Sign up

Malware Found in Arch Linux AUR Package Repository

guest Guest

Useful Searches