Oh dear, the situation with the Arch Linux AUR got a fair bit worse since GamingOnLinux initially covered the malicious packages.
  • bless@lemmy.ml
    3·
    23 hours ago

    Of course. A compromised package can’t be on the list if it’s unknown. Hopefully not, but there’s still a possibility