Arch Linux disables package adoption due to influx of malicious adoptions

about 13 hours ago

As an Arch user, I am well aware of the potential security issues using AUR. Since AI has become so accessible, the number of malicious packages has skyrocketed. A common attack is to adopt packages as a new maintainer and distribute bundle malware in a new update. This is why it is critical to review pkgbuild files prior to updating packages.

Paru makes this easy, and is my preferred AUR helper. During every update it will have you approve the new pkgbuild file before installation. It is a little more work during updates, but it allows you to see if a package was adopted by a new user or the distribution point has changed.

To provide even more protection, I created a small helper script that wraps Yay/Paru and checks new packages against Aurwatch.org to see if there are any reported malicious code.

AurWatch provides an API that makes it easy to check prior to doing any updates.

For now my aur-safe-update package is only available on Github, but I plan on adding it to Aur soon.

You can find it here: https://github.com/officiallymarky/aur-safe-update

Aur-Safe-Update is only a ~250 line bash script and is easy to review. Usage is really easy, just call it instead of Yay/Paru and it will detect which one you have installed and use the correct one.

security malware ai hive-engine vyb pob cent neoxian leofinance

0.000

3 comments

@kgakakillerg -15

about 9 hours ago

To @jacobtothe @themarkymark @acidyo @hurtlocker and friends 😁 You must be smart enough to understand you and your stupid friends have been exposed

You can keep lying as much as you like it changes nothing you should be smart enough to understand that 🤔

What's nice about you running around downvoting people and talking 💩💩

You call the truth spam it says a lot about you as I keep saying please get help 🙏🏾

As I've said from the start bring my rep back stop downvoting me and I stop sharing the truth 🛑

But believe me you have much bigger problems 😂😂🍻

If you reply with nonsense don't expect me to respond

You know what you are going to get some more of that truth you like to call spam 😂😂🍻

You could never bully me in real life and you can never bully me online it will only backfire like it has already on you and your friends 😂😂😂😂😂😂😂😂

I don't play game's I finish them 😂🍻

kgakakillerg evidence

kgakakillerg original content

@crimsonclad please do your job 🙏🏾

https://hive.blog/hive-135178/@crimsonclad/re-kgakakillerg-sxllhv

https://hive.blog/hive-148441/@hivewatchers/svftu9

https://hive.blog/hive-148441/@hivewatchers/svdjjz

https://hive.blog/hive-176853/@steevc/re-kgakakillerg-syyy4x

https://hive.blog/dev/@howo/re-kgakakillerg-szhax7

https://hive.blog/hive/@steevc/follow-friday-respect

https://hive.blog/hive-127022/@shmoogleosukami/re-kgakakillerg-t0hcxc

It's unbelievable that they downvoted this Goodbye Auntie R.I.P 🙏🏾

Comments being downvoted by blocktrades https://hive.blog/hive-170744/@kgakakillerg/t0ns3b

https://hive.blog/hive-127466/@steevc/re-blocktrades-t0kint

https://hive.blog/hive-127466/@blocktrades/t0lq41

https://hive.blog/hive/@ureka.stats/the-untrending-report-hive-downvote-analysis-2025-06-29-20250629143829

https://hive.blog/hive-127466/@kgakakillerg/t0m1vn

https://hive.blog/hive-108278/@kgakakillerg/t0rfo8

https://hive.blog/hive-127466/@kgakakillerg/t0vcl7

Stop farming Hive https://hive.blog/burnpost/@buildawhale/re-1756307402814502169-20250827t151240z

😂😂😂😂😂

RE: Understanding Pointers in C Programming

Please Peakd, allow me to completely block spammers (Would you ever vote for this?) thanks for exposing yourself more @makerhacks

Please go through it all instead of calling it spam 😂😂😂😂🤣🤣🤣🤣🤣🤣🤣

https://blurt.blog/hive/@candy49/5slvnx-taskmaster4450-is-being-downvoted-on-hive-by-you-know-who

🚨🚨🚨🚨🚨🚨🚨🙄🙄🙄🙄🚨🚨🚨🚨

https://hive.blog/hive-108278/@kgakakillerg/themarkymark

https://hive.blog/hive-178138/@thefed/t6q9kb 🙄🙄🙄🙄🙄🙄🙄🚨🚨🚨🚨🚨🚨🚨🚨🙄🙄🙄🙄🙄

https://hive.blog/music/@geneeverett33/11-25-25-three-tune-tuesday-picking-tunes-from-the-punk-band-the-descendents-1982-1997-era

🚨🚨🚨🙄🙄🙄🙄🙄🙄🙄🚨🚨🚨🚨🚨

https://hive.blog/dmania/@steemcleaners/ps46kb

https://hive.blog/hive-124838/@fjworld/re-peaksnaps-t7161i

🚨🚨🚨🚨🙄🙄🙄🙄🙄🙄🙄🙄🙄🚨🚨🚨🚨

https://blurt.blog/blurt-131902/@condividisulweb/3w94e8-hive-manipulation-censorship-and-suspicious-funds-the-hidden-truth

🚨🚨🚨🚨🙄🙄🙄🙄🚨🚨🚨

https://hive.blog/hive/@kgakakillerg/i-ve-been-put-on-two-blacklists

Thank you for reading and viewing this post

To all the downvoters on Hive When the downvotes stop 🛑 and my rep is back I stop sharing the truth 🙏🏾

I'm sharing the truth I know it hurts you but it is what it is 😂🍻

Consider these entries from @hive.fund's wallet—a digital fortress of staggering proportions:
"HIVE: 31,354,125.286"
"HBD: 23,325,897.167"
"Estimated Account Value: $24,860,896.64<

It's crazy that hives market cap is 36 million dollars 🤔🧐 and a account to hold 24 million dollars 💰 crazy

☝🏾😂😂😂😂😂😂😂😂📷📸📸

☝🏾☝🏾☝🏾☝🏾☝🏾

#themarkymarkfiles #buildawhalefiles #acidyofiles #hurtlockerfiles #neoxianfiles #louis88files #azirconfiles #jacobtothefiles #ausbitbankfiles #poshtokenfiles #menofiles #Guiltypartiesfiles #Usainvotefiles #smoothfiles

☝🏾☝🏾☝🏾☝🏾☝🏾☝🏾☝🏾☝🏾

0.000

@kgakakillerg -15

about 9 hours ago

You work for blocktrades 😂 or with blocktrades 😂 it's over buddy 😂

To @jacobtothe @themarkymark @acidyo @hurtlocker and friends 😁 You must be smart enough to understand you and your stupid friends have been exposed

You can keep lying as much as you like it changes nothing you should be smart enough to understand that 🤔

What's nice about you running around downvoting people and talking 💩💩

You call the truth spam it says a lot about you as I keep saying please get help 🙏🏾

As I've said from the start bring my rep back stop downvoting me and I stop sharing the truth 🛑

But believe me you have much bigger problems 😂😂🍻

If you reply with nonsense don't expect me to respond

You know what you are going to get some more of that truth you like to call spam 😂😂🍻

You could never bully me in real life and you can never bully me online it will only backfire like it has already on you and your friends 😂😂😂😂😂😂😂😂

I don't play game's I finish them 😂🍻

kgakakillerg evidence

kgakakillerg original content

@crimsonclad please do your job 🙏🏾

https://hive.blog/hive-135178/@crimsonclad/re-kgakakillerg-sxllhv

https://hive.blog/hive-148441/@hivewatchers/svftu9

https://hive.blog/hive-148441/@hivewatchers/svdjjz

https://hive.blog/hive-176853/@steevc/re-kgakakillerg-syyy4x

https://hive.blog/dev/@howo/re-kgakakillerg-szhax7

https://hive.blog/hive/@steevc/follow-friday-respect

https://hive.blog/hive-127022/@shmoogleosukami/re-kgakakillerg-t0hcxc

It's unbelievable that they downvoted this Goodbye Auntie R.I.P 🙏🏾

Comments being downvoted by blocktrades https://hive.blog/hive-170744/@kgakakillerg/t0ns3b

https://hive.blog/hive-127466/@steevc/re-blocktrades-t0kint

https://hive.blog/hive-127466/@blocktrades/t0lq41

https://hive.blog/hive/@ureka.stats/the-untrending-report-hive-downvote-analysis-2025-06-29-20250629143829

https://hive.blog/hive-127466/@kgakakillerg/t0m1vn

https://hive.blog/hive-108278/@kgakakillerg/t0rfo8

https://hive.blog/hive-127466/@kgakakillerg/t0vcl7

Stop farming Hive https://hive.blog/burnpost/@buildawhale/re-1756307402814502169-20250827t151240z

😂😂😂😂😂

RE: Understanding Pointers in C Programming

Please Peakd, allow me to completely block spammers (Would you ever vote for this?) thanks for exposing yourself more @makerhacks

Please go through it all instead of calling it spam 😂😂😂😂🤣🤣🤣🤣🤣🤣🤣

https://blurt.blog/hive/@candy49/5slvnx-taskmaster4450-is-being-downvoted-on-hive-by-you-know-who

🚨🚨🚨🚨🚨🚨🚨🙄🙄🙄🙄🚨🚨🚨🚨

https://hive.blog/hive-108278/@kgakakillerg/themarkymark

https://hive.blog/hive-178138/@thefed/t6q9kb 🙄🙄🙄🙄🙄🙄🙄🚨🚨🚨🚨🚨🚨🚨🚨🙄🙄🙄🙄🙄

https://hive.blog/music/@geneeverett33/11-25-25-three-tune-tuesday-picking-tunes-from-the-punk-band-the-descendents-1982-1997-era

🚨🚨🚨🙄🙄🙄🙄🙄🙄🙄🚨🚨🚨🚨🚨

https://hive.blog/dmania/@steemcleaners/ps46kb

https://hive.blog/hive-124838/@fjworld/re-peaksnaps-t7161i

🚨🚨🚨🚨🙄🙄🙄🙄🙄🙄🙄🙄🙄🚨🚨🚨🚨

https://blurt.blog/blurt-131902/@condividisulweb/3w94e8-hive-manipulation-censorship-and-suspicious-funds-the-hidden-truth

🚨🚨🚨🚨🙄🙄🙄🙄🚨🚨🚨

https://hive.blog/hive/@kgakakillerg/i-ve-been-put-on-two-blacklists

Thank you for reading and viewing this post

To all the downvoters on Hive When the downvotes stop 🛑 and my rep is back I stop sharing the truth 🙏🏾

I'm sharing the truth I know it hurts you but it is what it is 😂🍻

Consider these entries from @hive.fund's wallet—a digital fortress of staggering proportions:
"HIVE: 31,354,125.286"
"HBD: 23,325,897.167"
"Estimated Account Value: $24,860,896.64<

It's crazy that hives market cap is 36 million dollars 🤔🧐 and a account to hold 24 million dollars 💰 crazy

☝🏾😂😂😂😂😂😂😂😂📷📸📸

☝🏾☝🏾☝🏾☝🏾☝🏾

☝🏾☝🏾☝🏾☝🏾☝🏾☝🏾☝🏾☝🏾

0.000

@bozz 83

about 3 hours ago

Thanks for this info. I still haven't made the switch to Arch on my production boxes.

0.000