# Yay issues **URL:** \ **Category:** Pacman & AUR helpers\ **Created:** [August 1, 2026, 7:41pm UTC](https://forum.endeavouros.com/t/yay-issues/80826 "2026-08-01T19:41:05Z")\ **Posts on this page:** 1\ **Showing post:** 27
**Author:** ![Mellow](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/mellow/32/137692_2.png) [@Mellow](https://forum.endeavouros.com/u/Mellow)\ **Post date:** [August 2, 2026, 6:15am UTC](https://forum.endeavouros.com/t/yay-issues/80826/27 "2026-08-02T06:15:52Z")
> [@Jim](#): > > I heard there’s some script or application to check for bad AUR applications-packages, but don’t know where to get it. Do you know where I can get information about it? Hard to give a definite answer here because there are so many on this forum alone… Many wrote scripts to check if you were affected when like the first wave of attacks happened, here are some threads > [@Malicious AUR Checkup Script](https://forum.endeavouros.com/t/malicious-aur-checkup-script/80114): > > From CachyOS Moderator [cscs](https://discuss.cachyos.org/u/cscs/summary) TL;DR Here’s what I got… ─❯ curl -s https://cscs.pastes.sh/raw/aurvulntest20260611.sh | bash Checking for infected AUR packages (480 total)... Clean: None of the known infected packages were installed within 48 hours of the campaign. ─❯ > [@AUR Malware Campaign: Small helper script to find out if you're affected](https://forum.endeavouros.com/t/aur-malware-campaign-small-helper-script-to-find-out-if-youre-affected/80132): > > Hi fellow EndeavorOS users, I orginally posted on Reddit and was advised to post it here too so here I am I wrote a small shell script that scans your system for any trace of the payload in your AUR cache and system, in accordance to the findings made by `ioctl.fail` and Sonatype. It tries to be a bit smarter than just checking against the evergrowing package list (Vector and payload name rotated already, there’s now at least `atomic-lockfile`, `js-lockfile` and `digest-js`, injected by eithe… This project is still in beta, but probably more interesting for all the things it can check > **[GitHub - musqz/archcanary: Arch Linux security canary — layered AUR...](https://github.com/musqz/archcanary)** > > Arch Linux security canary — layered AUR supply-chain scanner with systemd, eBPF, and kmod auditing. --- _[View the full topic](https://forum.endeavouros.com/t/yay-issues/80826)._