This is a most excellent place for technology news and articles.
Yeah I had a mild panic before realising that I haven't actually used aur for anything yet
So, I'm totally fine because I always manually install from the AUR? This is more of a problem for people using those AUR helpers that make a package manager out of it, right?
No. If it came from AUR, it doesnt matter the method you used. You should check all the AUR apps you recently updated (from 9th to 12th June), and compare it to the lists. Only AUR though... Arch official repos are not affected by it.
I only ever access the AUR in an Arch distrobox... The containerization should protect me right?
Expecting user to inspect install scripts is retarded. And this is the result.
flatpak has a sandbox
It's a sandbox in the sense that it is a box to keep the sand in one place under normal circumstances. It was never intended to completely prevent sand from being ejected by an unruly child inside of it. Or perfectly keep outside toys from being brought into it if someone tries to do that.
