Y
Hacker News
new
|
ask
|
show
|
jobs
Hijacking Arch Linux Packages by Repo Jacking GitHub Repositories
(
blog.nietaanraken.nl
)
6 points
by
joren485
1209 days ago
1 comments
2bluesc
1209 days ago
Should note this only applies to AUR packages and `-git` mostly because of missing archive hashes.
AUR packages pinned to mutable tags are easiest to hijack.
link
_emacsomancer_
1209 days ago
article notes that they "found nine vulnerable packages (in the community repository)"
link
AUR packages pinned to mutable tags are easiest to hijack.