Don't use AUR. If an app isn't available in the official Arc...

Ken 🎋

npub13ar54wmscwv8lalf8lweuqwt4h3d44dgkdrflgdt52vcywsua6ysny3uwh

hex

44f0d26b7538c4c9783643984cf62a1755137dfff61a2bc0a331a462b96d002c

nevent

nevent1qqsyfuxjdd6n33xf0qmy8xzv7c4pw4gn0hllvx3tcz3nrfrzh9ksqtqprpmhxue69uhhyetvv9ujuem4d36kwatvw5hx6mm9qgsg7362hdcv8xrl7l5nlhv7q896mck66k5tx35l5x469xvz8gwwazg3j436j

Kind-1 (TextNote)

2026-06-16T00:14:51Z

↳ Reply to Cardinal (npub10zskyx7upd80krt4ndgqt4angkacsvd54cav3j6w399kzq2nlpkqfnnr0m)

Any mitigations?

Don't use AUR. If an app isn't available in the official Arch repos, get it directly at the source.

Or use AUR, but check carefully before installing anything. The AUR package managers let you inspect the scripts, for a reason ;)

Raw JSON

{
  "kind": 1,
  "id": "44f0d26b7538c4c9783643984cf62a1755137dfff61a2bc0a331a462b96d002c",
  "pubkey": "8f474abb70c3987ff7e93fdd9e01cbade2dad5a8b3469fa1aba299823a1cee89",
  "created_at": 1781568891,
  "tags": [
    [
      "p",
      "8f474abb70c3987ff7e93fdd9e01cbade2dad5a8b3469fa1aba299823a1cee89"
    ],
    [
      "p",
      "78a1621bdc0b4efb0d759b5005d7b345bb8831b4ae3ac8cb4e894b610153f86c"
    ],
    [
      "e",
      "5701ecabdd2781d55d159d8709b143bf161570070d466f764df148a15d355f7c",
      "",
      "reply",
      "78a1621bdc0b4efb0d759b5005d7b345bb8831b4ae3ac8cb4e894b610153f86c"
    ],
    [
      "e",
      "e2bc4904bc82b6cb7c5475dbd1809f94a645446d1aa211ce8e560ada13bb2162",
      "",
      "root",
      "8f474abb70c3987ff7e93fdd9e01cbade2dad5a8b3469fa1aba299823a1cee89"
    ],
    [
      "client",
      "Primal Android"
    ]
  ],
  "content": "Don't use AUR. If an app isn't available in the official Arch repos, get it directly at the source. \n\nOr use AUR, but check carefully before installing anything. The AUR package managers let you inspect the scripts, for a reason ;) \n\n",
  "sig": "7e5c1c15817538a542d48d68c9d63f835aec6251bf16f6f0d48ccd25ba3f2a4e522c817e7fc727b0bc3ca12efdab39fa3453ccc6974e1be0e793a36796bc8be6"
}