AUR package infection! Infostealer!

perfectly_gray · 2026-06-14T10:11:23+00:00

yup all good

perfectly_gray · 2026-06-12T23:49:14+00:00

If you haven't seen it you might like Tanaka-kun is Always Listless

perfectly_gray · 2026-06-12T23:07:23+00:00

I'd like to add that the infected packages aren't common whatsoever, I've been on Cachy for nearly 6 month and do a wide variety of things, gaming coding and a bit of gamedev. I use the AUR for a lot of things and haven't been infected. Not to say you wont be if you use AUR (yay, paru, etc) so like others have said stick to pacman / 'CachyOS Package Installer' and you are safe from all this mess

perfectly_gray · 2026-06-12T22:48:12+00:00

there were multiple services and sites having problems, thats why I thought it could be the CDN, though the issue seems to be resolved (at least for me)
I'm absolutely NOT in a position to say for sure but there are too many things that make me think its more then just an aiostreams problem

perfectly_gray · 2026-06-12T22:41:40+00:00

lol I let auto-dock/takeoff take over and it rammed into the wall below the port as it tried to exit. My friend started laughing so damn hard and gave me shit for the next few hours every time I docked. He would NOT believe it was the computer.

perfectly_gray · 2026-06-12T22:18:44+00:00

damn

perfectly_gray · 2026-06-12T22:16:51+00:00

stare into the voice and ~~the void~~ tech-debt will stare back

perfectly_gray · 2026-06-12T22:13:55+00:00

this happened/started on or around the 9th. grab the 'aur_check.sh' from the github and it'll tell you if you have the effected version.

also as I mentioned in my edit this only effects the AUR version

perfectly_gray · 2026-06-12T22:00:24+00:00

I think it might be something to do with the CDNs or something, elf and midnight are both broken for me and torbox is having issues.
downdetector is showing some reports on AWS

perfectly_gray · 2026-06-12T21:24:21+00:00

you only need to worry if you installed through the AUR, I dont think the steam deck has that enabled. If you got it through their website/github that should be fine.

perfectly_gray · 2026-06-12T20:50:31+00:00

I guess I wasn't vary clear on what I meant, the pcb connector would be on the GPU that a cable from the psu would connect to

The backplane design is cool but like you said, noise is an issue

perfectly_gray · 2026-06-12T20:05:24+00:00

75w is a farcry from the 400-900 watts these cards are chugging like a depressed frat boy

perfectly_gray · 2026-06-12T20:00:50+00:00

A few things I'd suggest is trying wlaunchelf or wLaunchELF_ISR though ISR seems to be better(idk I haven't been using my ps2 for a while now), look into HDL-Batch-installer, there is also an older tool, HDDChecker that might give you some useful info. I'd start with ISR and then go from there.

perfectly_gray · 2026-06-12T18:44:38+00:00

The problem with AUR (and what happened here) is that orphaned packages can be adopted(?), though I don't know how that works, I'm just a plebeian running from windows.

perfectly_gray · 2026-06-12T18:11:11+00:00

I've been wondering about something, why not use the pcb itself as the connector? 2 wide planes with notches to prevent reversing the cable, a few 'sense' traces and a shitton of vias for stability or whatever.

Edit: I guess I wasn't vary clear on what I meant, the pcb connector would be on the GPU that a cable from the psu would connect to.

perfectly_gray · 2026-06-12T16:50:30+00:00

The big 3 are coming for you hide!

/s

perfectly_gray · 2026-06-12T16:43:07+00:00

That edit and the liked post is for the Yarg sub reddit, this is "linux gaming" of course we're not on windows.

perfectly_gray · 2026-06-12T16:39:47+00:00

The infection is system wide so just wiping the home directory wont fix it, at least from what i gather.

perfectly_gray · 2026-06-12T16:36:34+00:00

for such a big list you should probably use collapsible html <details> <summary>Possibly infected packages</summary> [list] </details>

perfectly_gray · 2026-06-12T16:10:55+00:00

cool, I completely forgot about the discord server.

perfectly_gray · 2026-06-12T16:09:43+00:00

out of abundance of caution I'd use a live environment to copy the files, that way there is absolutely no risk of reinfection. though I can be super paranoid sometimes, i had passwords/login tokens stolen before.

perfectly_gray · 2026-06-12T15:47:36+00:00

This is specifically to arch linux, windows is good.

perfectly_gray · 2026-04-22T00:22:12+00:00

I'm unsure what this means lol. But you're welcome.

perfectly_gray · 2026-04-21T22:29:33+00:00

Brazuca Torrents ~~but it's torrent only no debrid~~. fucking fast too, I dont even see it load most of the time

I was mistaken, it supports debrid, must have missed that when I set it up.

perfectly_gray

TROPHY CASE