Post #3320047

As long as you’re using a slower release cycle, ie something like Debian, then you shouldn’t need to be concerned. I think anyone riding the crest of the wave with Arch (& esp. the AUR) would likely be aware that things break, so, supply chain attacks are likely to be seen here quicker. I honestly wouldn’t be surprised if PPAs had similar issues, but might take longer to be noticed. Personally, I have a lot of Ansible building my stuff, so actually rebuilding things wouldn’t be an issue, but, would I then be installing everything with all the current latest malware…?