[Tool] Privacy-focused AUR Malware Audit Tool (Atomic Arch Incident)
2026-06-14 09:02 UTC
The “Atomic Arch” campaign compromised over 1,500 AUR packages between June 10-12, targeting SSH keys and API tokens. If you updated via yay or paru during that window, you need to audit your local system.
I’ve built a client-side tool to help with this.
Local Processing: Your package list never leaves your browser. All comparisons are done client-side.
Live Data: It fetches the verified malicious list directly from the official Arch servers (md.archlinux.org) to ensure it’s always current.
Zero Bloat: No trackers, no ads, no cookies.
How to use:
Run pacman -Qm
Paste the output into the tool
Replies (3)
-
@avidamoeba@lemmy.ca 2026-06-14 10:57
I’d nuke and pave if I were an Arch btw user. Then rotate keys and passwords everywhere impartant.
-
@graynk@discuss.tchncs.de 2026-06-14 11:35
The script in the top post of this thread does a better job, since it actually looks when you have upgraded the affected packages: discuss.cachyos.org/t/…/31040
-
@Cyber@feddit.uk 2026-06-14 11:36
Nice. That helped me quickly test my systems, thanks