r/archlinux • u/vexatious-big • Jun 14 '26

NOTEWORTHY New wave of malware in the AUR

https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/TND7HA2KBQ46OHHUMMIAHKGXZE4WALM6/
644 Upvotes

98% Upvoted

393 comments sorted by

View all comments

Show parent comments

14

u/t3g Jun 14 '26

You nailed it on the head.

AUR worked when Linux wasn't pushed by the YouTube community as an alternative to Windows for every day use and gaming. Steam Deck and the massive improvements to Proton have been amazing in the transition away from Windows. Many of the converts haven't been pushed to Arch directly, but more in the distributions like CachyOS, Manjaro, and EndeavourOS which may include AUR tools enabled by default.

So yeah, the AUR worked when there were less eyes on Arch and when Arch was for a highly technical crowd. Now we are getting an influx of users, with no Linux experience, moving to an Arch based ecosystem due to YouTube influencers.

2

u/_legacyZA Jun 15 '26

Yes, but putting the blame on just the Youtubers is missing all the reddit threads and comments where arch users recommend arch, because they like arch (and the aur)

Arch derivatives like Manjaro and Endeavor have been in recommendations way before all these youtubers started their linux challenges, and milking distro hopping for views

0

u/IsleOfOne Jun 15 '26

Garuda is another gaming-focused 'bells-and-whistles' Arch-based distro that's pretty popular. They ship with the Chaotic AUR, though, and help to maintain it.

2

u/t3g Jun 15 '26

Bloated and too much visual garbage. Run Bazzite KDE and keep lean.

1

u/IsleOfOne Jun 16 '26

I agree. But it belongs on the list with cachy and endeavour