# Danger - AUR packages with suspicious binaries

**URL:** <https://forum.endeavouros.com/t/danger-aur-packages-with-suspicious-binaries/80800>\
**Category:** Pacman & AUR helpers\
**Created:** [July 30, 2026, 4:27pm UTC](https://forum.endeavouros.com/t/danger-aur-packages-with-suspicious-binaries/80800 "2026-07-30T16:27:40Z")\
**Posts on this page:** 1\
**Showing post:** 50

<div class="post-metadata">

**Author:** ![UncleSpellbinder](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/unclespellbinder/32/127055_2.png) [@UncleSpellbinder](https://forum.endeavouros.com/u/UncleSpellbinder)\
**Post date:** [August 2, 2026, 4:28pm UTC](https://forum.endeavouros.com/t/danger-aur-packages-with-suspicious-binaries/80800/50 "2026-08-02T16:28:48Z")

</div>

It’s probably better to keep Archcanary questions in the dedicated thread…

> [@Archcanary — a layered security scanner for Arch-based Linux (beta, looking for testers)](https://forum.endeavouros.com/t/archcanary-a-layered-security-scanner-for-arch-based-linux-beta-looking-for-testers/80837):
>
> Hey everyone, I’ve been building archcanary, a layered security scanner for Arch-based systems (developed and tested mainly on Mabox, should work on any Arch-based distro). “Layered” because it’s not one check — it stacks several independent detection passes together, so a threat that slips past one layer still has to get past the others: Have you ever installed a package now known to be malicious (checked against maintained threat-intel lists, including the big June 2026 AUR supply-chain att…

---

_[View the full topic](https://forum.endeavouros.com/t/danger-aur-packages-with-suspicious-binaries/80800)._
