
As an Arch user, I am well aware of the potential security issues using AUR. Since AI has become so accessible, the number of malicious packages has skyrocketed. A common attack is to adopt packages as a new maintainer and distribute bundle malware in a new update. This is why it is critical to review pkgbuild files prior to updating packages.
Paru makes this easy, and is my preferred AUR helper. During every update it will have you approve the new pkgbuild file before installation. It is a little more work during updates, but it allows you to see if a package was adopted by a new user or the distribution point has changed.
To provide even more protection, I created a small helper script that wraps Yay/Paru and checks new packages against Aurwatch.org to see if there are any reported malicious code.

AurWatch provides an API that makes it easy to check prior to doing any updates.
For now my aur-safe-update package is only available on Github, but I plan on adding it to Aur soon.
You can find it here: https://github.com/officiallymarky/aur-safe-update

Aur-Safe-Update is only a ~250 line bash script and is easy to review. Usage is really easy, just call it instead of Yay/Paru and it will detect which one you have installed and use the correct one.
To @jacobtothe @themarkymark @acidyo @hurtlocker and friends π You must be smart enough to understand you and your stupid friends have been exposed
You can keep lying as much as you like it changes nothing you should be smart enough to understand that π€
What's nice about you running around downvoting people and talking π©π©
You call the truth spam it says a lot about you as I keep saying please get help ππΎ
As I've said from the start bring my rep back stop downvoting me and I stop sharing the truth π
But believe me you have much bigger problems πππ»
If you reply with nonsense don't expect me to respond
You know what you are going to get some more of that truth you like to call spam πππ»
You could never bully me in real life and you can never bully me online it will only backfire like it has already on you and your friends ππππππππ
I don't play game's I finish them ππ»
@crimsonclad please do your job ππΎ
https://hive.blog/hive-135178/@crimsonclad/re-kgakakillerg-sxllhv
https://hive.blog/hive-148441/@hivewatchers/svftu9
https://hive.blog/hive-148441/@hivewatchers/svdjjz
https://hive.blog/hive-176853/@steevc/re-kgakakillerg-syyy4x
https://hive.blog/dev/@howo/re-kgakakillerg-szhax7
https://hive.blog/hive/@steevc/follow-friday-respect
https://hive.blog/hive-127022/@shmoogleosukami/re-kgakakillerg-t0hcxc
It's unbelievable that they downvoted this Goodbye Auntie R.I.P ππΎ
Comments being downvoted by blocktrades https://hive.blog/hive-170744/@kgakakillerg/t0ns3b
https://hive.blog/hive-127466/@steevc/re-blocktrades-t0kint
https://hive.blog/hive-127466/@blocktrades/t0lq41
https://hive.blog/hive/@ureka.stats/the-untrending-report-hive-downvote-analysis-2025-06-29-20250629143829
https://hive.blog/hive-127466/@kgakakillerg/t0m1vn
https://hive.blog/hive-108278/@kgakakillerg/t0rfo8
https://hive.blog/hive-127466/@kgakakillerg/t0vcl7
Stop farming Hive https://hive.blog/burnpost/@buildawhale/re-1756307402814502169-20250827t151240z
πππππ
π The Untrending Report - Hive Downvote Analysis - 2025-09-07
RE: Understanding Pointers in C Programming
Please Peakd, allow me to completely block spammers (Would you ever vote for this?) thanks for exposing yourself more @makerhacks
Please go through it all instead of calling it spam πππππ€£π€£π€£π€£π€£π€£π€£
https://blurt.blog/hive/@candy49/5slvnx-taskmaster4450-is-being-downvoted-on-hive-by-you-know-who
π¨π¨π¨π¨π¨π¨π¨πππππ¨π¨π¨π¨
https://hive.blog/hive-108278/@kgakakillerg/themarkymark
https://hive.blog/hive-178138/@thefed/t6q9kb ππππππππ¨π¨π¨π¨π¨π¨π¨π¨πππππ
https://hive.blog/music/@geneeverett33/11-25-25-three-tune-tuesday-picking-tunes-from-the-punk-band-the-descendents-1982-1997-era
π¨π¨π¨ππππππππ¨π¨π¨π¨π¨
https://hive.blog/dmania/@steemcleaners/ps46kb
https://hive.blog/hive-124838/@fjworld/re-peaksnaps-t7161i
π¨π¨π¨π¨ππππππππππ¨π¨π¨π¨
https://blurt.blog/blurt-131902/@condividisulweb/3w94e8-hive-manipulation-censorship-and-suspicious-funds-the-hidden-truth
π¨π¨π¨π¨πππππ¨π¨π¨
https://hive.blog/hive/@kgakakillerg/i-ve-been-put-on-two-blacklists
Thank you for reading and viewing this post
To all the downvoters on Hive When the downvotes stop π and my rep is back I stop sharing the truth ππΎ
I'm sharing the truth I know it hurts you but it is what it is ππ»
It's crazy that hives market cap is 36 million dollars π€π§ and a account to hold 24 million dollars π° crazy
βπΎπππππππππ·πΈπΈ
βπΎβπΎβπΎβπΎβπΎ
#themarkymarkfiles #buildawhalefiles #acidyofiles #hurtlockerfiles #neoxianfiles #louis88files #azirconfiles #jacobtothefiles #ausbitbankfiles #poshtokenfiles #menofiles #Guiltypartiesfiles #Usainvotefiles #smoothfiles
βπΎβπΎβπΎβπΎβπΎβπΎβπΎβπΎ
You work for blocktrades π or with blocktrades π it's over buddy π
To @jacobtothe @themarkymark @acidyo @hurtlocker and friends π You must be smart enough to understand you and your stupid friends have been exposed
You can keep lying as much as you like it changes nothing you should be smart enough to understand that π€
What's nice about you running around downvoting people and talking π©π©
You call the truth spam it says a lot about you as I keep saying please get help ππΎ
As I've said from the start bring my rep back stop downvoting me and I stop sharing the truth π
But believe me you have much bigger problems πππ»
If you reply with nonsense don't expect me to respond
You know what you are going to get some more of that truth you like to call spam πππ»
You could never bully me in real life and you can never bully me online it will only backfire like it has already on you and your friends ππππππππ
I don't play game's I finish them ππ»
@crimsonclad please do your job ππΎ
https://hive.blog/hive-135178/@crimsonclad/re-kgakakillerg-sxllhv
https://hive.blog/hive-148441/@hivewatchers/svftu9
https://hive.blog/hive-148441/@hivewatchers/svdjjz
https://hive.blog/hive-176853/@steevc/re-kgakakillerg-syyy4x
https://hive.blog/dev/@howo/re-kgakakillerg-szhax7
https://hive.blog/hive/@steevc/follow-friday-respect
https://hive.blog/hive-127022/@shmoogleosukami/re-kgakakillerg-t0hcxc
It's unbelievable that they downvoted this Goodbye Auntie R.I.P ππΎ
Comments being downvoted by blocktrades https://hive.blog/hive-170744/@kgakakillerg/t0ns3b
https://hive.blog/hive-127466/@steevc/re-blocktrades-t0kint
https://hive.blog/hive-127466/@blocktrades/t0lq41
https://hive.blog/hive/@ureka.stats/the-untrending-report-hive-downvote-analysis-2025-06-29-20250629143829
https://hive.blog/hive-127466/@kgakakillerg/t0m1vn
https://hive.blog/hive-108278/@kgakakillerg/t0rfo8
https://hive.blog/hive-127466/@kgakakillerg/t0vcl7
Stop farming Hive https://hive.blog/burnpost/@buildawhale/re-1756307402814502169-20250827t151240z
πππππ
π The Untrending Report - Hive Downvote Analysis - 2025-09-07
RE: Understanding Pointers in C Programming
Please Peakd, allow me to completely block spammers (Would you ever vote for this?) thanks for exposing yourself more @makerhacks
Please go through it all instead of calling it spam πππππ€£π€£π€£π€£π€£π€£π€£
https://blurt.blog/hive/@candy49/5slvnx-taskmaster4450-is-being-downvoted-on-hive-by-you-know-who
π¨π¨π¨π¨π¨π¨π¨πππππ¨π¨π¨π¨
https://hive.blog/hive-108278/@kgakakillerg/themarkymark
https://hive.blog/hive-178138/@thefed/t6q9kb ππππππππ¨π¨π¨π¨π¨π¨π¨π¨πππππ
https://hive.blog/music/@geneeverett33/11-25-25-three-tune-tuesday-picking-tunes-from-the-punk-band-the-descendents-1982-1997-era
π¨π¨π¨ππππππππ¨π¨π¨π¨π¨
https://hive.blog/dmania/@steemcleaners/ps46kb
https://hive.blog/hive-124838/@fjworld/re-peaksnaps-t7161i
π¨π¨π¨π¨ππππππππππ¨π¨π¨π¨
https://blurt.blog/blurt-131902/@condividisulweb/3w94e8-hive-manipulation-censorship-and-suspicious-funds-the-hidden-truth
π¨π¨π¨π¨πππππ¨π¨π¨
https://hive.blog/hive/@kgakakillerg/i-ve-been-put-on-two-blacklists
Thank you for reading and viewing this post
To all the downvoters on Hive When the downvotes stop π and my rep is back I stop sharing the truth ππΎ
I'm sharing the truth I know it hurts you but it is what it is ππ»
It's crazy that hives market cap is 36 million dollars π€π§ and a account to hold 24 million dollars π° crazy
βπΎπππππππππ·πΈπΈ
βπΎβπΎβπΎβπΎβπΎ
#themarkymarkfiles #buildawhalefiles #acidyofiles #hurtlockerfiles #neoxianfiles #louis88files #azirconfiles #jacobtothefiles #ausbitbankfiles #poshtokenfiles #menofiles #Guiltypartiesfiles #Usainvotefiles #smoothfiles
βπΎβπΎβπΎβπΎβπΎβπΎβπΎβπΎ
Thanks for this info. I still haven't made the switch to Arch on my production boxes.