1. There is a malicious npn package
2. aur packages are modified so that their build script picks from the npn repo the malicious package
1. makes 2. more subtle, because in a quick overview of PKGBUILD one may think that getting an npn package is OK.
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。