@bacteriostat@infosec.exchange
2025-07-18 19:04 UTC
@archlinux@fosstodon.org
Would be interesting to know on how these were discovered. Also, is their a semi-official review process that is done on the AUR packages?
Replies (1)
-
@30p87@chaos.social 2025-07-19 08:33
@bacteriostat@infosec.exchange @archlinux@fosstodon.org In an ideal world, every user would follow the instructions and skim through every PKGBUILD - essentially just a script - they execute. And ofc flag it when they see something malicious. So the users themselves are the reviewers.