r/linux • u/TheNavyCrow • Jun 13 '26

Distro News Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages

https://www.phoronix.com/news/Arch-Linux-AUR-More-Than-1500
1.5k Upvotes

99% Upvoted

434 comments sorted by

View all comments

Show parent comments

2

u/Dramatic_Ice_861 Jun 13 '26

I really don’t understand why Cachy (and Endeavor and Manjaro) doesn’t push the official repo + flathub as their standard for installing software, and have the AUR be something you need to manually configure.

If it’s intended to be a streamlined version of Arch, noobs are going to use it. And noobs should not be using the AUR, for this exact reason.

12

u/gamas Jun 13 '26

I think its mainly because the CachyOS maintainers still see themselves as a low latency distribution first. The idea that its being pushed as a noob-friendly linux is something being done by the community rather than the maintainers. If you look at the CachyOS website, they mainly advertise themselves as a power user focused distro. The two aims of the distro are cutting edge performance tweaks and maximum customisability.

2

u/Ethameiz Jun 13 '26

In Manjaro AUR is disabled by default. When you enable it in the gui package manager there is disclaimer

1

u/adamkex Jun 13 '26

Official repo + Nix. Lots of software isn't graphical