Malicious packages have been identified in the AUR repository of Arch Linux.
In the AUR (Arch User Repository), used in Arch Linux for distributing third-party packages, three malicious packages have been identified: firefox-patch-bin, librewolf-fix-bin, and zen-browser-patched-bin, containing modified builds of the Firefox, Librewolf, and Zen browsers. The package names resembled legitimate packages like firefox-bin, librewolf-bin, and zen-browser-bin, which are maintained by enthusiasts in AUR. The PKGBUILD file in the packages contained a link to patches downloaded […]
