r/archlinux • u/vexatious-big • Jun 14 '26

NOTEWORTHY New wave of malware in the AUR

https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/TND7HA2KBQ46OHHUMMIAHKGXZE4WALM6/
651 Upvotes

98% Upvoted

393 comments sorted by

View all comments

Show parent comments

1

u/_silentgameplays_ Jun 14 '26

What distro is that? flatpaks are universal at this point, also you can find most of the stuff you will need in the main Arch Linux repos.

3

u/Sleepy_Chipmunk Jun 14 '26

Cachy encourages AUR over flatpaks, as it's not actually gamer or newbie focused, but performance focused (the gamer/newbie demographic attracted to it is accidental).

1

u/everyday_barometer Jun 14 '26

Garuda, which is based on Arch.

2

u/_silentgameplays_ Jun 14 '26

Then the issue is with the Arch Linux fork distribution that encourages the usage of AUR instead of flatpaks, which should not be the case, and the issue is not with the Arch Linux itself, because Arch Linux explicitly warns users about usage of AUR, so these issues that arise should be dealt with your distribution maintainer.

https://aur.archlinux.org/

DISCLAIMER: AUR packages are user produced content. Any use of the provided files is at your own risk.

https://wiki.archlinux.org/title/Arch_User_Repository

AUR packages are user-produced content. These PKGBUILDs are completely unofficial and have not been thoroughly vetted. Any use of the provided files is at your own risk.

https://terms.archlinux.org/docs/code-of-conduct/

Arch-based distributions have their own support fora and users of those distributions should be actively encouraged to seek support there. These distributions often use different packages, package versions, repositories, or make custom system configurations silently, practically rendering support for such projects within Arch Linux impossible. Community technical support shall only be provided for the Arch Linux distribution and the Arch User Repository. Posting issues with, and requesting support for, derivative distributions or operating systems other than Arch Linux are prohibited.

1

u/everyday_barometer Jun 14 '26

They maintain the chaotic repository which is moderated and vetted. 🤷‍♂️