RC RANDOM CHAOS

Arch Linux

2 posts

PackageKit waved 1500 packages through unchecked
Article

PackageKit waved 1500 packages through unchecked

Arch Linux calls a 1500-package malware incident contained. An install path that skips verification was never a control, only a delivery channel.

A reverse shell dressed as a Firefox patch
Article

A reverse shell dressed as a Firefox patch

Inside the 2025 AUR compromise: how CHAOS RAT shipped in fake browser packages, why update automation made it worse, and how to audit PKGBUILDs in 30 seconds.