aur compromised package check
This commit is contained in:
474
aur_check.sh
Executable file
474
aur_check.sh
Executable file
@@ -0,0 +1,474 @@
|
||||
#!/usr/bin/env bash
|
||||
|
||||
# AUR atomic-lockfile malware check - June 11 2026
|
||||
# Sources:
|
||||
# https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/FGXPCB3ZVCJIV7FX323SBAX2JHYB7ZS4/
|
||||
# https://gr.ht/aur_pkg_list.txt
|
||||
|
||||
INFECTED_PKGS=(
|
||||
123pan-bin
|
||||
1code
|
||||
8192eu-dkms-git
|
||||
actual-ai
|
||||
adblock2privoxy
|
||||
aion-git
|
||||
albion-online-launcher-bin
|
||||
alienfx
|
||||
alvr
|
||||
android-signapk
|
||||
android-signapk-gui
|
||||
annobin
|
||||
ansible-language-server
|
||||
antfs-cli-git
|
||||
anythingllm-appimage
|
||||
anythingllm-cli-bin
|
||||
apk-installer-gui
|
||||
apm_planner-bin
|
||||
apothem
|
||||
apple-music-desktop
|
||||
arch-update-vai
|
||||
archjh
|
||||
archlinux-themes-slim
|
||||
archmage
|
||||
archtex-git
|
||||
artanis-git
|
||||
astro-editor-appimage
|
||||
autohand-cli
|
||||
autolabel
|
||||
autologin
|
||||
azurlaneautoscript
|
||||
bcachefs-kernel-dkms-git
|
||||
beebeep
|
||||
bitcoin-core-git
|
||||
blinkenlib
|
||||
blueproximity-py3-git
|
||||
booklore
|
||||
brow6el
|
||||
brow6el-git
|
||||
canon-pixma-mg3000-complete-fixed
|
||||
cartridge-cli
|
||||
ccase-bin
|
||||
ccl-git
|
||||
cgminer
|
||||
charcoal
|
||||
cinny-desktop-system-tray
|
||||
clai
|
||||
clang19
|
||||
clash-mi
|
||||
cling-git
|
||||
cmuclmtk
|
||||
cnijfilter-common
|
||||
codenomad-bin
|
||||
codeql-cli-bin
|
||||
cogpit-bin
|
||||
colorhug-client
|
||||
colorz
|
||||
compiler-rt19
|
||||
compizconfig-python
|
||||
coolreader
|
||||
cowdancer
|
||||
cutefish-calculator
|
||||
cutefish-core
|
||||
cutefish-dock
|
||||
cutefish-filemanager
|
||||
cutefish-icons
|
||||
cutefish-launcher
|
||||
cutefish-qt-plugins
|
||||
cutefish-screenlocker
|
||||
cutefish-screenshot
|
||||
cutefish-settings
|
||||
cutefish-statusbar
|
||||
cutefish-wallpapers
|
||||
cvs-feature-bin
|
||||
cynthiune.app
|
||||
dagu-bin
|
||||
datatype99
|
||||
deheader
|
||||
dep
|
||||
dh-python
|
||||
difi
|
||||
difi-bin
|
||||
doctoc
|
||||
dots-hyprland-fork-git
|
||||
dvdrip
|
||||
dyad-bin
|
||||
easy_spice
|
||||
edconv-bin
|
||||
eisl
|
||||
epson-inkjet-printer-escpr2-clos-bin
|
||||
exodus-wallet-bin
|
||||
exoduswallet
|
||||
farmmod-hub
|
||||
fastoggenc
|
||||
fastjet
|
||||
fatx
|
||||
fcitx5-pinyin-sougou-dict-git
|
||||
ffmpeg-bitrate-stats
|
||||
ffmpeg-quality-metrics
|
||||
findpkg-git
|
||||
firefox-extension-adnauseam-bin-amo
|
||||
firmium-desktop-git
|
||||
fishui
|
||||
fishui-git
|
||||
flexiblas
|
||||
flynarwhal
|
||||
fmlib
|
||||
forgecode-bin
|
||||
formidable-bin
|
||||
frame
|
||||
ftl
|
||||
frutool
|
||||
futhark-bin
|
||||
gdl
|
||||
gdlmm
|
||||
git-annex-standalone
|
||||
gnome-contacts-git
|
||||
gnutls3.8.9
|
||||
gopher2600
|
||||
gopher2600-bin
|
||||
gosh
|
||||
gpx-viewer
|
||||
graveman
|
||||
green-tunnel-bin
|
||||
greetd-wlgreet-git
|
||||
gtkimageview
|
||||
guile-reader
|
||||
gummy
|
||||
gummy-git
|
||||
hackmatrix-git
|
||||
harmony-wad
|
||||
headphones
|
||||
hearthstone-linux-gui-appimage
|
||||
hearthstone-linux-gui-bin
|
||||
hepmc2
|
||||
hister-git
|
||||
hnswlib-git
|
||||
horst
|
||||
hydownloader-git
|
||||
hydrus-git
|
||||
i3bar-river
|
||||
ianny-bin
|
||||
ibm-sw-tpm2
|
||||
ihaskell-git
|
||||
imageglass
|
||||
inadyn
|
||||
indicator-session
|
||||
infnoise-openssl-git
|
||||
interface99
|
||||
ios-webkit-debug-proxy
|
||||
ipfs-desktop-bin
|
||||
ipsw
|
||||
iron-heart-git
|
||||
jasp-desktop
|
||||
jd-gui
|
||||
k3sup
|
||||
kdb
|
||||
kddockwidgets-git
|
||||
kexi
|
||||
kiss
|
||||
ktea
|
||||
kookbook
|
||||
kproperty
|
||||
kreport
|
||||
latex-digsig
|
||||
lazylpsolverlibs-git
|
||||
lesstif
|
||||
lib32-egl-wayland
|
||||
libafterimage
|
||||
libbobcat
|
||||
libcutefish
|
||||
libffi-static
|
||||
libgdata
|
||||
libjxl-noglycin
|
||||
libquvi
|
||||
libquvi-scripts
|
||||
libretro-hatari-enhanced-git
|
||||
libxdiff
|
||||
libxml-ruby
|
||||
libyami
|
||||
linux-cachyos-deckify-native
|
||||
linux-cachyos-native
|
||||
linux-cachyos-rc-native
|
||||
linux-tool
|
||||
liri-cmake-shared-git
|
||||
lite
|
||||
lll
|
||||
llvm-cbe-git
|
||||
lowfi-bin
|
||||
"ls++"
|
||||
lucidvideo
|
||||
m5rcode
|
||||
magpie-wm
|
||||
mako-center-git
|
||||
manuskript
|
||||
maszyna-git
|
||||
mathsat-5
|
||||
matrixbrandy
|
||||
mcp-probe
|
||||
mcpatcher
|
||||
mermaid-ascii-git
|
||||
mermark-editor
|
||||
mesa-dlss-reflex-git
|
||||
mimic-node-git
|
||||
mingw-w64-geos
|
||||
mingw-w64-libsndfile
|
||||
minimax-bin-hardened
|
||||
misuzu-music-bin
|
||||
mono-addins
|
||||
monochrome
|
||||
monochrome-git
|
||||
moor-git
|
||||
mount-gtk
|
||||
mopen
|
||||
n1-translator
|
||||
naemon
|
||||
naemon-livestatus
|
||||
natapp
|
||||
nebuchadnezzar-git
|
||||
neovim-autopairs-git
|
||||
neovim-nvim-treesitter
|
||||
nerf-pi
|
||||
neuro-karaoke-wrapper-git
|
||||
new-api-privacy-filter
|
||||
new-api-privacy-filter-git
|
||||
nexus-bin
|
||||
nginx-mod-vts
|
||||
nhentai-git
|
||||
nocodb
|
||||
noctyra-dotfiles-git
|
||||
"notepad---bin"
|
||||
nox-bin
|
||||
nrpe
|
||||
nwchem-bin
|
||||
ob-xd
|
||||
octocode
|
||||
opencode-codebase-index-bin
|
||||
openui5
|
||||
opl-synth
|
||||
optimizevideo-git
|
||||
oracle-bin
|
||||
pacforge
|
||||
paper-desktop-bin
|
||||
paq8o
|
||||
parallel-python
|
||||
pass-cli
|
||||
pelican-git
|
||||
penguin-subtitle-player
|
||||
perl-proc-parallelloop
|
||||
perl-set-object
|
||||
perl-term-extendedcolor
|
||||
phonon-qt5-vlc
|
||||
php-geoip
|
||||
php-memcache
|
||||
php-openswoole-git
|
||||
php-xdiff
|
||||
picom-ftlabs-git
|
||||
pidgin-kwallet
|
||||
pipetoys
|
||||
pipewire-visualizer-git
|
||||
premake-git
|
||||
prisma4postgres-bin
|
||||
profile-sync-daemon-zen
|
||||
pymacs
|
||||
pypiserver
|
||||
pypy-setuptools
|
||||
python-argdispatch
|
||||
python-awkward
|
||||
python-calmjs
|
||||
python-celery
|
||||
python-ci-info
|
||||
python-coolname
|
||||
python-cu2qu-git
|
||||
python-dataproperty
|
||||
python-dbapi-compliance
|
||||
python-dictobject
|
||||
python-dj-database-url
|
||||
python-fastmcp-slim
|
||||
python-finnhub-python
|
||||
python-firebase-admin
|
||||
python-fmu_manipulation_toolbox
|
||||
python-future
|
||||
python-g4f
|
||||
python-hist
|
||||
python-histoprint
|
||||
python-hsaudiotag3k
|
||||
python-iminuit
|
||||
python-iso3166
|
||||
python-isr-git
|
||||
python-jsmin
|
||||
python-json2xml
|
||||
python-luckydonald-utils
|
||||
python-milvus-lite-bin
|
||||
python-mmcif
|
||||
python-monotonic
|
||||
python-mplhep
|
||||
python-mplhep_data
|
||||
python-netaudio-git
|
||||
python-netaudio-lib
|
||||
python-newspaper4k
|
||||
python-nipype
|
||||
python-nodejs-wheel
|
||||
python-openai-harmony
|
||||
python-pdf2docx
|
||||
python-piecash
|
||||
python-pluginmgr
|
||||
python-poetry-plugin-dotenv
|
||||
"python-pushbullet.py"
|
||||
python-pychromecast-git
|
||||
python-pylsp-rope
|
||||
python-pymilvus
|
||||
python-pysocks-git
|
||||
python-rembg
|
||||
python-scikit-hep-testdata
|
||||
python-sklearn-pandas
|
||||
python-sqliteschema
|
||||
python-starlette-compress
|
||||
python-starsessions
|
||||
python-steamcontroller-git
|
||||
python-tabledata
|
||||
python-tarantool
|
||||
python-tradingeconomics
|
||||
python-uhi
|
||||
python-uproot
|
||||
python-vector
|
||||
python-xtarfile
|
||||
python2-appdirs
|
||||
python2-fusepy
|
||||
python2-lazr-uri
|
||||
python2-mutagen
|
||||
python2-notify
|
||||
python2-packaging
|
||||
python2-paver
|
||||
python2-pyparsing
|
||||
python2-simplejson
|
||||
python2-simpleparse
|
||||
python2-stomper
|
||||
python2-twodict-git
|
||||
python2-xlib
|
||||
qhttpengine
|
||||
qlementine
|
||||
qmdnsengine
|
||||
qnapi
|
||||
qobuz-player-bin
|
||||
qtum-core
|
||||
quickswitch-i3
|
||||
r-dbplyr
|
||||
reactphysics3d
|
||||
repoporge
|
||||
retibbs-client-git
|
||||
rhythmbox-git
|
||||
rimworld
|
||||
rog-helper-git
|
||||
ros2-humble-nav2-msgs
|
||||
ruah-orch
|
||||
ruby-excon
|
||||
ruby-kramdown-rfc2629
|
||||
ruby-selenium-webdriver
|
||||
runescape-launcher
|
||||
sakura-launcher-gui
|
||||
sandlock
|
||||
screenpipe-bin
|
||||
sdcc-bin
|
||||
seahorse-nautilus
|
||||
shhmsg
|
||||
shhopt
|
||||
slipnet
|
||||
slipnet-bin
|
||||
smenu
|
||||
smenu-git
|
||||
smolrtsp
|
||||
smolrtsp-libevent
|
||||
snry-shell-qs
|
||||
soapyptezuka
|
||||
solara-kernel-headers
|
||||
sonosano
|
||||
soundpaad-bin
|
||||
sshuttlee
|
||||
sshuttlee-bin
|
||||
stompbox-jack-git
|
||||
stripe-cli
|
||||
stylelint-config-recommended
|
||||
subbrute
|
||||
sublist3r-git
|
||||
subprocess
|
||||
subsync
|
||||
svu
|
||||
sway-xkb-switcher
|
||||
tack
|
||||
tarantool
|
||||
tesseract-gui
|
||||
thunar-nextcloud-plugin
|
||||
thunderbird-conversations
|
||||
tinyemu
|
||||
tlpui-git
|
||||
torch7-git
|
||||
touchhle
|
||||
touchosc-bin
|
||||
transcreen
|
||||
tsm
|
||||
ttf-material-design-icons-git
|
||||
tunacode-cli
|
||||
typing-game-cli
|
||||
ukui-notification-daemon
|
||||
vapoursynth-preview-git
|
||||
vbam-git
|
||||
verso-git
|
||||
vidcutter
|
||||
vim-easymotion
|
||||
vim-gitgutter
|
||||
vim-indent-object
|
||||
vim-molokai
|
||||
vim-solidity
|
||||
vim-vital
|
||||
vocalinux-git
|
||||
voquill-gpu
|
||||
wallpaper-generator-next
|
||||
wayland-static
|
||||
we-layerd-git
|
||||
whatsie-git
|
||||
whisper2tr
|
||||
whisper2tr-git
|
||||
windowmaker-git
|
||||
wine-nine
|
||||
wire-desktop
|
||||
word-snatchers-cli
|
||||
workbench
|
||||
workbuddy-bin
|
||||
wrystr-git
|
||||
wsjtx-beta
|
||||
xf86-input-mtrack-git
|
||||
xorg-xfsinfo
|
||||
xplot
|
||||
xpra-html5
|
||||
xray-domain-list-community
|
||||
yarg
|
||||
yt6801-dkms
|
||||
yy
|
||||
zathura-gruvbox-git
|
||||
zerx-lab-dida-bin
|
||||
zerx-lab-zed-nightly-bin
|
||||
zing-8-bin
|
||||
zing-17-bin
|
||||
zing-21-bin
|
||||
zinnia-python
|
||||
zsdx
|
||||
)
|
||||
|
||||
echo "Checking for infected AUR packages (${#INFECTED_PKGS[@]} total)..."
|
||||
echo
|
||||
|
||||
found=()
|
||||
for pkg in "${INFECTED_PKGS[@]}"; do
|
||||
if pacman -Qi "$pkg" &>/dev/null; then
|
||||
found+=("$pkg")
|
||||
fi
|
||||
done
|
||||
|
||||
if [[ ${#found[@]} -eq 0 ]]; then
|
||||
echo "Clean: none of the known infected packages are installed."
|
||||
else
|
||||
echo "WARNING: ${#found[@]} infected package(s) found:"
|
||||
for pkg in "${found[@]}"; do
|
||||
echo " - $pkg"
|
||||
done
|
||||
fi
|
||||
Reference in New Issue
Block a user