ܛܔܔܔܛܔܛܔܛ retweeted
20h
Scales, the eBPF malware targeting ArchLinux
sha0coder.github.io/scales/
15
49
3,769
🚨 AUR malware (atomic-lockfile/lockfile-js/nextfile-js, 1500 pkgs).
Bash script that detects by behavior, not name lists: npm/bun in .install hooks, shell obfuscation, /tmp payloads. Read-only.
🔗 gist.github.com/l33tm4st3r/f…
#ArchLinux #infosec
8
🚨 AUR malware (atomic-lockfile/lockfile-js/nextfile-js, 1500 pkgs).
Bash script that detects by behavior, not name lists: npm/bun in .install hooks, shell obfuscation, /tmp payloads. Read-only.
🔗 gist.github.com/l33tm4st3r/f…
#ArchLinux #infosec
1
30
Ataque de malware en AUR de Arch Linux afecta más de 400 paquetes ArchLinux
El Arch User Repository (AUR), el repositorio comunitario de Arch Linux, ha sido el objetivo de una inusual campaña de malware que ha afectado a más de 400 paquetes.
lapolakmx.com/ataque-de-malw…
14
The supply chain attack on the #ArchLinux #AUR was inevitable. 3 years ago, the AUR admins gave away control of the SDR package (that I was maintaining) because someone complained about a minor versioning issue that I didn't want to fix. (1/4)
3
2
82
7,585
ArchLinux had the opportunity to intake many packages over the years and maintain them internally, but refused due to pressure from the know-it-all stalwarts who think they know better and downvote package adoption all the time. Now we have this mess due to stupidity.
1
7
"#csharp #dotnet. I use #ArchLinux, btw"
Uses the worst language and the absolute worst toy distribution that can't even figure out SELinux.
11
In my opinion, ArchLinux needs to purge the entire AUR admin team and replace them with more competent people. They should also use common fucking sense and not transfer ownership of a package if said package is owned by the developer of that software...
2
1
47
1,468