#aurpocalypse — Public Fediverse posts

On a more positive note: Someone has built a lovely little, simple GIS app that visualizes your or others GitHub star sources across the world with some additional analytics. Pretty, useful. Generally awesome I'd say.

Needs more of that. Maybe adapt to @Codeberg or other @forgejo instances? It's FOSS.

Here's the application to the little #aurpocalypse related script I made:

https://starmapper.bruniaux.com/lenucksi/aur-malware-check

#gis #github #codeberg #forgejo #awesome #visualization #webgis #foss #opensource

@sodiboo @ifin @threatintel @archlinux Hopefully now the worst of that #AURpocalypse campaign is through (🤞) .
Some friendly people even contributed some info on unrelated campaigns that targeted the AUR. The entire thing has racked up 1,8k stars on Github.

I've turned the original shell script bandaid into a small Python CLI that's ready for the next campaign.
I certainly don't look forward to it, but at least there should be something that makes creating a tool a bit easier if the new campaigns are even half-related in their approaches.

#Github #AURpocalypse

@sodiboo @ifin @threatintel

Also, notable mention. unexpected thread: https://github.com/lenucksi/aur-malware-check/issues/5

Are there any plans on some bit more central validation, maybe even with some AI/LLM/... with regular conversion of insights to fixed/deterministic rules as discussed throughout the thread? Something something semgrep/opengrep, yara, flathub manifest style etc pp?
Update: Looping in @archlinux here.
Also, any plans on enforcing this -> https://wiki.archlinux.org/title/DeveloperWiki:Building_in_a_clean_chroot for all the AUR build business?

Also: How does this incident not yet have a creative name? I'm not asking for a #bumsrakete but there's gotta be something 🤣

Edit: https://jguer.space/blog/2026-06-15-yay-v13 delivered. It's the #AURpocalypse 😱 🤣

#llm #flathub #abuseprevention #malwareCheck #yara #opengrep #archLinux #archlinuxaur #aur #AURpocalypse