OpenMandriva: Statement regarding attempted distribution sabotage
Summary
OpenMandriva issues a statement regarding an attempted sabotage against their Linux distribution.
Similar Articles
OpenMandriva Says Former Contributor Sabotaged Its Repositories
OpenMandriva released a statement accusing former contributor Davide Beatrici of sabotaging its GitHub repositories and publishing empty packages in its Cooker development branch, potentially harming systems with GNOME and COSMIC desktops. The project is restoring data and has declined to pursue legal action.
Merchants of Insecurity
A blog post criticizes the Omarchy Linux distribution for critical security vulnerabilities, arguing that its leadership prioritizes marketing over security practices.
Sanctions on Open Source. hope they don’t do anything stupid here.
Expresses concern about potential sanctions affecting open source software, urging caution to avoid unintended consequences.
Arch Linux disables AUR package adoption
Arch Linux has disabled adoption of orphaned AUR packages after a wave of malicious package adoptions pushed remote-access trojans to users, following earlier account-registration suspensions and a previous attack campaign.
Dozens of Red Hat packages backdoored through its official NPM channel
Dozens of Red Hat packages were backdoored through the company's official NPM channel using the Shai-Hulud worm, which compromised Red Hat's CI/CD pipeline via GitHub Actions OIDC. Red Hat has removed the malicious packages and stated they were internal only, but the attack underscores escalating supply-chain risks.