this post was submitted on 12 Jun 2026
438 points (99.8% liked)

Technology

85391 readers
3804 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
438
400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers (cybersecuritynews.com)
submitted 1 day ago by rafssunny@lemmy.zip to c/technology@lemmy.world
132 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] prole@lemmy.blahaj.zone 1 points 15 hours ago (3 children)

I only ever access the AUR in an Arch distrobox... The containerization should protect me right?

[–] replicat@lemmy.world 2 points 6 hours ago

Absolutely not

[–] KssioAug@lemmy.dbzer0.com 3 points 9 hours ago

Nope. Distrobox does not offer any meaningful protection, since its purpose is to integrate with the system. It's basically meant to make downloading and managing packages from different distros, on the same system, much easier... but it's not meant to protect and isolate your device the same way that Flatpak or other type of containers do. That baing said, stop relying on Distrobox as a safety measure, and check your recently installed and updated packages since 9th June, to make sure you were not infected.