Post #4378359

Arch Linux suspends AUR package adoptions after third supply-chain attack since June. Malware evolved from npm commands to obfuscated JS downloaders and now embedded https://deafnews.it/en/article/arch-linux-halts-aur-package-adoptions-third-supply-chain-attack-in-two-months