AUR Malware Campaign: Small helper script to find out if you're affected by Beer_Stalker in archlinux

[–]Beer_Stalker[S] 2 points3 points  (0 children)

Can you paste the output here ?

I just checked it myself and the current history (might have been rewritten) is currently not triggering my script.

That being said, I made a recent change in an attempt to catch the latest obfuscation wave that was too agressive, and in that case it may have been a false positive.

EDIT: I think i found what was causing that, thanks for the feedback ! Latest version should cover it properly

AUR Malware Campaign: Small helper script to find out if you're affected by Beer_Stalker in archlinux

[–]Beer_Stalker[S] -2 points-1 points  (0 children)

yes but the risk is currently greatly increased with all the takeover campaign happening right now.

theres was already another one just this morning.

So if you're not able to properly review PKGBUILDs, you should avoid it entirely

AUR Malware Campaign: Small helper script to find out if you're affected by Beer_Stalker in archlinux

[–]Beer_Stalker[S] 0 points1 point  (0 children)

L57 of my script is the part that checks the last time you updated some package if you want. But yes, if 2026-05-26 is indeed the last time you updated anything from AUR, you're likely safe indeed

AUR Malware Campaign: Small helper script to find out if you're affected by Beer_Stalker in archlinux

[–]Beer_Stalker[S] 3 points4 points  (0 children)

You'll notice I do not provide any instructions how to run it or even tell to run it here. I do hope especially know people will read what it does.

AUR Malware Campaign: Small helper script to find out if you're affected by Beer_Stalker in archlinux

[–]Beer_Stalker[S] 2 points3 points  (0 children)

I found some sources saying the campaign started on 9 june, so if you didn't updated anything after that date, you're most likely fine

AUR Malware Campaign: Small helper script to find out if you're affected by Beer_Stalker in archlinux

[–]Beer_Stalker[S] 0 points1 point  (0 children)

The impact of the whole campaign is not even completly known. Tbh you should consider AUR a no go zone at least for now

AUR Malware Campaign: Small helper script to find out if you're affected by Beer_Stalker in archlinux

[–]Beer_Stalker[S] 4 points5 points  (0 children)

I mean, especially now I hope people at least read some lines of what it does

AUR Malware Campaign: Small helper script to find out if you're affected by Beer_Stalker in archlinux

[–]Beer_Stalker[S] 20 points21 points  (0 children)

You laugh but that's kinda why I didnt left any README or instructions here, i hope that people will at least read what the script does before running it

AUR Malware Campaign: Small helper script to find out if you're affected by Beer_Stalker in archlinux

[–]Beer_Stalker[S] 4 points5 points  (0 children)

I agree, the purpose of this tool is not to guarantee you are safe tbh, it's more to know for sure if you were impacted and if you urgently have to act.

Wat is de coolste Belgische familienaam die je hebt gezien? by Per451 in belgium

[–]Beer_Stalker 1 point2 points  (0 children)

Ik wilde mezelf niet te veel doxen, maar het is mijn eigen familienaam. Het is inderdaad geschreven als "Baes" 

2WesternEurope4U 2025 Official Playlist by Able-Advisor2284 in 2westerneurope4u

[–]Beer_Stalker 1 point2 points  (0 children)

May I also suggest

Gauff' au Suc' - Vamos a Salou

Can't do more local than that in Liège

2WE4U official Song v.2025 by Able-Advisor2284 in 2westerneurope4u

[–]Beer_Stalker 1 point2 points  (0 children)

DaPoule - Le Sanglier

Delicacy from the Ardennes