In case you’re unaware of this latest email blast re: nefarious AUR updates, here’s what was communicated a few minutes ago: I just received a slew of notifications about orphaned packages that were adopted and updated replacing the source array with a binary: monitorets python-unpackable python…

I think it’s clear that we disagree on various issues, and we have different visions of what to do or how to approach things. That’s not a bad thing, on the contrary, but I think I’ve bored everyone enough on the subject.

[image] winnyace: I would reinstall the entire system and change passwords for important websites immediately and pray that little damage to none will happen/has happened. That’s the bitter pill I would swallow, too.

I guess that’s the AUR… I can’t lie when I say that this, alongside a developer of 10 years leaving the Arch Linux project, isn’t reassuring, like at all.

There are no tools like in windows to delete those ? virusscanner or something ?

I don’t know and I honestly wouldn’t even bother looking. Desktop Linux simply never had such malware attacks happening like Windows does, as far as I know, so the amount of AV engines is probably little and likely of poor quality as well. Even under Windows, if I got infected with something, I hone…

Here’s my result. What do I need to review for DKMS? Any suggestions? Check summary ─────────────────────────────────────────────────────── Package list (2061 pkgs) ✅ clean pacman.log history ✅ clean Systemd persistence ✅ clean eBPF rootkit tr…

It’s probably better to keep Archcanary questions in the dedicated thread… [image] Archcanary — a layered security scanner for Arch-based Linux (beta, looking for testers) Applications Hey everyone, I’ve been building archcanary, a layered security scanner fo…

[image] dirn: What do I need to review for DKMS? I checked it under sudo. [acdkms]

Thanks @UncleSpellbinder @thefrog :slight_smile:

Well you have to ask yourself if a virusscanner always will protect you from malicious packages. Over the years I have been reading about this and that virus (on windows) that can not be detected by any anti virus software yet. Same thing about a virus that will simply disable the virus scanner.

I don’t think many pieces of malware are sophisticated enough to completely block AV engines out right. It requires finding out ways to block a process that extremely high privileges from doing its thing, so that requires doing deep, hard work to do. From what I know, AV engines sometimes simply ca…

Danger - AUR packages with suspicious binaries

General system Pacman & AUR helpers

UncleSpellbinder August 2, 2026, 4:28pm 50

It’s probably better to keep Archcanary questions in the dedicated thread…