June 2026 - Arch-general - lists.archlinux.org

npm, pip and friends
by Ralf Mardorf 13 Jun '26

13 Jun '26

Hi, the fact that npm and similar package managers currently pose an extremely high security risk (and soon pip as well?) comes as a complete surprise ;). Perhaps what's happening in the AUR right now is the so-called "silver lining" of a crisis. There are so many suggestions on how to make the AUR complicated, unusable, user-unfriendly, like fighting fire with fire, but perhaps it is finally time to put an end to this insane, unmanageable chaos in package management. Wake-up call Ralf

2 4

Re: Tip to avoid malware from AUR: add node package managers to your IgnorePkg
by Ralf Mardorf 12 Jun '26

12 Jun '26

On Fri, 2026-06-12 at 14:43 +0200, solsTiCe d'Hiver wrote: > but that is just indication. After all, if it installs a rootkit, it > can hide those things.. Thank you, no indication here. I don't have time at the moment, but the next step is to check against rootkits. Regards, Ralf PS: I think there's something wrong with the mailing list. An email I sent couldn't be delivered, and I can't access the Arch General Mailing List archive.

1 0

Tip to avoid malware from AUR: add node package managers to your IgnorePkg
by Fermín Olaiz 12 Jun '26

12 Jun '26

Friendly reminder that given most of the ongoing attacks are based on node packages you can always add the package managers to your pacman.conf's IgnorePkg as a second line of defense (assuming you don't use them). IgnorePkg = yarn bun pnpm npm nodejs-nopt node-gyp And remember to check your PKGBUILDs! :) Fermín Olaiz. PS: sent this to arch-general as I think it might be useful.

2 1

Can't boot anymore
by Philippe Delavalade 04 Jun '26

04 Jun '26

Hi. After a long sequence of troubles for booting (don't want to be boring with it), I did the following : 1) I boot with my installation DVD 2) I mount my arch partition nvme0n1p4 on /mnt 3) arch-chroot /mnt 4) I deleted my old efi partition nvme0n1p2 5) I created a new one on nvme0n1p5 6) I created directory /boot and mounted /dev/nvme0n1p5 on it 7) grub-install --target=x86_64-efi --efi-directory=/boot --bootloader-id=GRUB 8) I made some modifications in /etc/default/grub 9) grub-mkconfig -o /boot/grub/grub.cfg Now I get two entries in /boot/grub/grub.cfg : one for arch and a second for "UEFI Firmware Settings". But when booting, no output of grub menu ; I arrive directly in the bios (or firmware). How can I progress ? I attached four files : /etc/fstab /etc/defaul/grub /boot/grub/grub.cfg the output of "ls /boot" in boot.txt. Hope someone can help :-) I'm sending this from my laptop. regards. -- Philippe

3 7