Fake Arch Linux packages push malware with root privileges

T1Covered by 1 source · first reported by BleepingComputer at 15 Oct, 17:12 UTC

A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]

devsecurity

Sources

• T1Fake Arch Linux packages push malware with root privilegesBleepingComputer15 Oct, 17:12