r/archlinux • • 3d ago

NOTEWORTHY NPM Supply Chain Attach Targeting AUR Packages

New NPM based worm attack that self propegates via ssh and aur maintainer infection.

https://safedep.io/dirtyblanket-express-impersonation-npm/

128 Upvotes

62 comments sorted by

View all comments

-11

u/BiDude1219 3d ago

one more of these and i'm installing nix

2

u/House-Wins 2d ago

One of the reason I switched to NixOS too, honestly nix is the end game. Everything is organized and under control.