
Fake Arch Linux AUR packages exploit typos to run malware with root privileges
Typosquatted Arch Linux AUR packages impersonating yay and paru could run downloaded code as root.
3
3 stories, newest first · one card per story

Typosquatted Arch Linux AUR packages impersonating yay and paru could run downloaded code as root.

Typosquatted Arch User Repository packages impersonating yay and paru ran a remote shell as root.
A security write-up details how any user process on the Omarchy Linux setup can escalate privileges to root.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views