/what/ - ...

I have always assumed there is malware in the AUR at any given time, you're kind of supposed to. It typically takes seconds to audit a PKGBUILD, I would have personally noticed this.

A bigger threat is official package maintainers going rogue, or upstream malware like what happened with Jia Tan and xz

I would say the worst issue right now is programming language library repos, like javascript npm, and Rust crates. Just constantly filled with malware, often by the DPRK Lazarus Group actually.

>>1560
i have a bazillion aur packages installed most of which i don't even use and forgot the reason i installed them in the first place, i also never seen a PKGBUILD in my life because i use yay

oh my god why did you delete your post the IE toolbar comparison was funny you are so annoying whatmin

NEVER bothered with arch only gentoo

hes a notorious deleter