u/Ismokecr4k

I feel like I'm taking crazy pills, where's the build up? Where can I view how much corruption I have from resting? Is it some hidden mechanic that I just randomly get after sleeping?

I looked on my PC for anything for anything installed with AUR. I do `pacman -Qm`, ok.. libgdata comes up. I don't remember ever installing it via the AUR. I think the only thing I installed from there was the Minecraft launcher from a year ago. It might be an orphan from using gnome. But how do I know if I'm affected and I happen to have done something by accident? It's irritating.

The affected commit seems to be missing (my pacman logs sais I upgraded last February): https://aur.archlinux.org/cgit/aur.git/log/PKGBUILD?h=libgdata but why isn't any history of the compromised commit here?

The affected list tells me nothing other than a list of "affected packages". How, when, what version? How is this acceptable? https://md.archlinux.org/s/SxbqukK6IA

And the arch news blog, seriously? What is this crap? https://archlinux.org/news/active-aur-malicious-packages-incident/

Even this subreddit, guys, why isn't there a pinned post or something here? Come on! Massive data breach on user's data and the client's are being gas lit by the community and Arch team themselves is being silent.

Edit: Read the post before telling my I should have the pkgbuild if I updated. sigh...

Edit 2: This is so laughable. The gate keepers keep telling me I should've read the pkgbuild yet you can't even read the post and understand the context before responding.