# Confused by options when using YAY to install

**URL:** <https://forum.endeavouros.com/t/confused-by-options-when-using-yay-to-install/80382>\
**Category:** Pacman & AUR helpers\
**Created:** [June 30, 2026, 2:04pm UTC](https://forum.endeavouros.com/t/confused-by-options-when-using-yay-to-install/80382 "2026-06-30T14:04:34Z")\
**Posts on this page:** 1\
**Showing post:** 9

<div class="post-metadata">

**Author:** ![thefrog](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/thefrog/32/114250_2.png) [@thefrog](https://forum.endeavouros.com/u/thefrog)\
**Post date:** [June 30, 2026, 2:48pm UTC](https://forum.endeavouros.com/t/confused-by-options-when-using-yay-to-install/80382/9 "2026-06-30T14:48:52Z")

</div>

Please take the time to read PKGBUILDS and never just accept them blindly

here are some threads on a recent malware attack on the AUR

> [@Malicious AUR packages](https://forum.endeavouros.com/t/malicious-aur-packages/80095):
>
> Greetings, I’m on the AUR mailing list and there has been huge influx of packages that were maliciously taken over today. Please check the PKGBUILD and be wary especially of new npm depencencies, particularly one named “atomic-lockfile”, but there might be others.

> [@Malicious AUR Checkup Script](https://forum.endeavouros.com/t/malicious-aur-checkup-script/80114):
>
> From CachyOS Moderator [cscs](https://discuss.cachyos.org/u/cscs/summary) TL;DR Here’s what I got… ─❯ curl -s https://cscs.pastes.sh/raw/aurvulntest20260611.sh | bash Checking for infected AUR packages (480 total)... Clean: None of the known infected packages were installed within 48 hours of the campaign. ─❯

Take time to read about pacman and (AUR wrapper of choice) in this case yay.

---

_[View the full topic](https://forum.endeavouros.com/t/confused-by-options-when-using-yay-to-install/80382)._