Hijacking Arch Linux Packages by Repo Jacking GitHub Repositories(blog.nietaanraken.nl)

6 pointsby joren4853 года назад2 comments

blog.nietaanraken.nl

Hijacking Arch Linux Packages by Repo Jacking GitHub Repositories

https://blog.nietaanraken.nl/posts/aur-packages-github-repo-jacking/

2 comments

2bluesc3 года назад

Should note this only applies to AUR packages and `-git` mostly because of missing archive hashes.

AUR packages pinned to mutable tags are easiest to hijack.

_emacsomancer_3 года назад

article notes that they "found nine vulnerable packages (in the community repository)"