odseey 12 points 4 months ago

More info here: https://discourse.ifin.network/...

Everyone should check and make sure you don't have one of these installed.

path: 0 24222526, hotness: undefined, score: 12, children: 5

darcmage 9 points 4 months ago

updated version: https://gist.github.com/...

https://github.com/lenucksi/aur-malware-check

https://gist.github.com/...

As always, don't execute random scripts before checking them.

save

path: 0 24222526 24222724, hotness: undefined, score: 9, children: 4

bisby 5 points 4 months ago

Oh fun. I had one of the packages installed, but not an infected version, and I hadn't updated it during the window.

Feels like a great reminder to keep a clean minimal system. Why I was keeping vidcutter installed and up to date when the last time I ran it was probably years ago.

save

path: 0 24222526 24222724 24224048, hotness: undefined, score: 5, children: 3

darcmage 2 points 4 months ago

I thought for sure I had a few of them since some of the packages looked familiar but everything came out clean. Hopefully it stays that way.

save

path: 0 24222526 24222724 24224048 24224203, hotness: undefined, score: 2, children: 2

bisby 2 points 4 months ago

My last update to vidcutter was from 2025 (based on my pacman logs). Some tools will scan for "did you install the bad package during the bad time period" and some will scan for "is the bad package name installed at all" - so i was able to identify that vidcutter was installed and I knew that the package names looking familiar made sense, and I was able to manually confirm that I was still clean. And now I have a lot of system pruning to do.

But if you thing some packages look familiar, it might be worth double checking.

save

path: 0 24222526 24222724 24224048 24224203 24224468, hotness: undefined, score: 2, children: 1

davetortoise -3 points 4 months ago

save

path: 0 24229076, hotness: undefined, score: -3, children: 0