AUR user marchos1as uploaded typosquatted yay and paru packages whose install script ran a remote shell script as root, detected October 13. It is the third AUR malware campaign BleepingComputer lists, after June and July.
Reality
- Evidence68
- Adoption
- Insufficient
- Hype gap−10
- Incentives
- Insufficient
- Confidence65
buildOne report1 publisher systemd's mstack mounted a single-layer directory writable by default in a dev.to test, and one written line overwrote a read-only file with exit code 0. Anyone shipping a one-layer stack in a unit file has to prove read-only with a test write.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+30
- Incentives
- Insufficient
- Confidence35
buildOne report1 publisher An HP Omen's mute light never lit under Linux because the audio driver had no per-machine fixup to write the codec coefficient that drives it. The merged fix is a single quirk-table entry.
Reality
- Evidence63
- Adoption40
- Hype gap−8
- Incentives28
- Confidence58
buildOne report1 publisher The amdxdna driver has been in-tree since kernel 6.14, and one developer's Arch build now serves large-v3-turbo from the NPU over an OpenAI-compatible port, which turns a Windows-first demo into something you can price.
Reality
- Evidence58
- Adoption24
- Hype gap+12
- Incentives34
- Confidence52
The company told staff the money went to the Omacom Foundation rather than to a person, and cited Omarchy's rank among its users as the reason. Customers and employees are reading it as a decision about a person anyway.
Reality
- Evidence72
- Adoption38
- Hype gap+12
- Incentives74
- Confidence63
buildOne report1 publisher Omarchy's patron ledger names twelve individuals and two companies and adds up to the dollar. The nonprofit meant to hold the trademarks has no jurisdiction, entity or headquarters on the record, and that is the part a fleet owner should be pricing.
Reality
- Evidence42
- Adoption47
- Hype gap+24
- Incentives74
- Confidence55