Scary coming from a GURU user

Posted Jun 20, 2026 10:50 UTC (Sat) by q3cpma (subscriber, #120859)
Parent article: AURpocalypse now: a look at the recent AUR attacks

Hope Gentoo's version of the AUR, https://wiki.gentoo.org/wiki/Project:GURU, isn't compromised in the same way. At least, I version pin the two packages I use from it and Gentoo users are way more prone to simply importing ebuilds into their local overlay (or at least reading them), but still...

---

The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:

Note: you can avoid this step in the future by logging into your LWN account.