Well, where is my part of the $3.5bn? I am not getting anything for my data.

Always encrypt your mother

Yes dance for me human

I would like a Sydney Sweeney version

I would recommend to firstly check the update window for the package. It seems that these packages only contained the malware PKGBUILD for a certain time period, before the commit was reverted back by the arch/air devs.

Then if you find youself infected, try

1. Rotating the stored passwords on chromium/electron based browsers/apps.
2. Rotate keys, (SSH, Cloud, Github etc).
3. Backup your files, this is not a virus, so the file are safe.
4. Reinstall the system from a live USB.
5. FINALLY Nuke your house with a Hydrogen bomb.

Analyzing the commit history of libdata, you can see the attacker pushed the malicious PKGBUILD on Jun 11, 2026 14.59 GMT. And it was reverted back to the previous commit on the same day, about 2.5 hours later, on Jun 11, 2026 at 17:30 GMT.

So it seems like if you updated the libgdata package during this period, your system might be affected.

Edit: Commit history: https://github.com/archlinux/aur/activity?ref=libgdata

Yes that seems to be the case. But on 12th of June, I did a yay update. But only librewolf-bin was updated. libgdata (0.18.1-5) was last updated on March 05 2026 for me.

Also I did some digging around. Seems like any packages that were installed using a AUR helper (like yay in my case) would leave logs in the /var/log/pacman. You can see them like this,

grep "package_name" /var/log/pacman

For yay installed packages you can see they are getting installed from ~/.config/yay/package_name. But for my libgdata, it simply says [ALPM] installed libgdata (0.18.1-5).

What to do if I found a package I installed to be in that list? libgdata to be specific?

Edit: Seems that the libgdata package was last installed on March 05.

You either die a hero or live long enough to see yourself become the villain

You only had one job

Doesn’t Open WebUI along with countless other frontends do this?

What makes it different from running ollama locally?

dave2d said it better. Having agents in your laptop doing your work for you is revolutionary, but trusting Microsoft with it is concerning.

The need for exempting proves the law is stupid.

Install a router/device based content filter if you need to block children from accessing porn.

What does the headphone and eye symbol do?

Wait, how do they know people are posting casual photos exactly? Are they snooping?

Is it AI? It is AI isn’t?

Are they going to ban tor too?

Yes