"On the 16th of July, at around 8pm UTC+2, a malicious AUR package was
uploaded to the AUR
The affected malicious packages are:
- librewolf-fix-bin
- firefox-patch-bin
- zen-browser-patched-bin
The Arch Linux team addressed the issue as soon as they became aware of
the situation. As of today, 18th of July, at around 6pm UTC+2, the
offending packages have been deleted from the AUR."
Spooke
in reply to DarkMahesvara • • •DarkMahesvara likes this.
DarkMahesvara
in reply to Spooke • • •@Spooke yes they where also all added just the day before
web.archive.org/web/2025071814…
web.archive.org/web/2025071813…
AUR (en) - zen-browser-patched-bin
web.archive.org