Arch Linux
2 posts
Article
PackageKit waved 1500 packages through unchecked
Arch Linux calls a 1500-package malware incident contained. An install path that skips verification was never a control, only a delivery channel.
Article
A reverse shell dressed as a Firefox patch
Inside the 2025 AUR compromise: how CHAOS RAT shipped in fake browser packages, why update automation made it worse, and how to audit PKGBUILDs in 30 seconds.