Friendly reminder that given most of the ongoing attacks are based on node packages you can always add the package managers to your pacman.conf's IgnorePkg as a second line of defense (assuming you don't use them).

IgnorePkg = yarn bun pnpm npm nodejs-nopt node-gyp


And remember to check your PKGBUILDs! :)

Fermín Olaiz.

PS: sent this to arch-general as I think it might be useful.

Reply via email to