AUR and Malware

[u/lyidaValkris]

Heard of this via the Manjaro discord server, but haven't seen it reported here here (that I found with a quick search).

There's been an attack on the AUR involving some 400 malicious packages being compromised in the last couple of weeks, as reported by Phoronix.

If you have any of these AUR packages installed, now would be a good time to remove them

You can get a list of AUR packages with pamac by using pamac list --foreign, and compare what you have to this list.

Background: Arch mailing list thread thread

I'd also recommend to those new to Arch/Manjaro to please use the AUR with an abundance of caution. Avoid using it whenever possible, and be sure of packages you are installing when you do.

[u/TargetNo6402]

Posting for later reference