Ezinsukwini ezimbalwa ezedlule kutholakale i-malware noma ikhodi enonya endaweni yokugcina edumile ye-Arch Linux distro, ikakhulukazi ku-Arch User Repository noma I-AUR njengoba kwaziwa. Futhi akuyona into entsha, sesivele sibonile kwezinye izikhathi ukuthi amanye ama-cybercriminals ahlasela kanjani amaseva athile lapho ukusatshalaliswa kweLinux namaphakeji esoftware abanjelwe ukuwashintsha ngekhodi enonya noma ngeminyango futhi aguqule amasheke ukuze abasebenzisi bangazi yalokhu kuhlaselwa nokuthi babefaka okuthile okungavikelekile kumakhompyutha abo.
Yebo, kulokhu bekusezinqolobaneni ze-AUR, ngakho-ke le khodi enonya ibingathinta abanye abasebenzisi abasebenzise le mphathi wephakheji ku-distro yabo nokuqukethe lokho ikhodi enonya. Amaphakeji kufanele ngabe aqinisekisiwe ngaphambi kokufakwa, ngoba ngaphandle kwazo zonke izinsiza i-AUR ezihlinzekela ukuhlanganisa nokufaka amaphakheji kalula kusuka kukhodi yayo yomthombo, akusho ukuthi kufanele siyithembe leyo khodi yomthombo. Ngakho-ke, bonke abasebenzisi kufanele bathathe izinyathelo ezithile zokuphepha ngaphambi kokufaka, ikakhulukazi uma sisebenza njengama-sysadmins kwiseva noma uhlelo olubucayi ...
Eqinisweni, iwebhusayithi ye-AUR uqobo ixwayisa ngokuthi okuqukethwe kufanele kusetshenziswe ngaphansi kwesibopho somsebenzisi, okufanele athathe izingozi. Futhi ukutholakala kwale malware kukufakazela kanjena, kuleli cala I-Acroread ilungiswe ngoJulayi 7, iphakethe ebeliyizintandane futhi elingenaso isondlo kwenzeka ukuthi liguqulwe ngumsebenzisi obizwa ngokuthi yi-xeactor ofake umyalo we-curl wokulanda ikhodi yeskripthi ngokuzenzakalela kusuka ku-pastebin, eyethule omunye umbhalo wokuthi bona bakhiqiza ukufakwa kweyunithi le-systemd ukuze bakwazi ukusebenzisa omunye umbhalo ngokuhamba kwesikhathi.
Futhi kubonakala sengathi amanye amaphakheji amabili we-AUR aguqulwe ngendlela efanayo ngezinhloso ezingekho emthethweni. Okwamanje, labo ababhekele i-repo bawasusile amaphakheji aguquliwe futhi basule i-akhawunti yomsebenzisi owenzile, ngakho-ke kubonakala sengathi amanye amaphakheji azobe ephephile okwamanje. Ngaphezu kwalokho, kwe- ukuthula kwalabo abathintekile, ikhodi enobungozi efakiwe ayenzanga lutho olubucayi kwimishini ethintekile, izama nje (yebo, ngoba iphutha komunye wemibhalo livimbele ububi obukhulu) ukulayisha imininingwane ethile kusuka ohlelweni lwesisulu.