aur-orphan-compromise

[robin-thoene]

Hey,

there is an ongoing attack running inside the AUR. To me it seems like ChimeraOS is not affected by this, unless the user explicitly installs a compromised package manually. Still I wanted to double check here if this is the case?

[NeroReflex]

Chimeraos builds using AUR an image that everybody uses. The last stable image was from way before this whole issue so unless install was unlocked no compromised software could have been installed.

Maybe unstable images might have been affected, but generally one that has been exposes knows this already.