AUR Attacked - again

[UncleSpellbinder]

It’s probably a good idea to lock this thread. Or merge it to one of the others.

• Carrying on a conversation here, especially about Archcanary, is just going to get confusing.

• There is already an Archcanary thread:

Archcanary — a layered security scanner for Arch-based Linux (beta, looking for testers)

Hey everyone, I’ve been building archcanary, a layered security scanner for Arch-based systems (developed and tested mainly on Mabox, should work on any Arch-based distro). “Layered” because it’s not one check — it stacks several independent detection passes together, so a threat that slips past one layer still has to get past the others: Have you ever installed a package now known to be malicious (checked against maintained threat-intel lists, including the big June 2026 AUR supply-chain att…

• There is already an AUR attack thread:

Danger - AUR packages with suspicious binaries

Archcanary Feature suggestion: add: Beginning time of start of the scan add: End time of start of the scan add: total scan time add: Display scan files/time stats at the end of the scan report add: log the scan results to a file and display log location at the end of the scan report