Skip to content

AUR Security Checks

A bash script that cross-references installed AUR packages against a known-compromised package list, sending a desktop notification if any match.

Script

Location: ~/.local/bin/aur-check.sh Autostart: ~/.config/hypr/modules/autostart.lua

#!/usr/bin/env bash
result=$(comm -12 <(pacman -Qqm | sort) <(curl -s https://paste.cachyos.org/73a714d | sort))
if [[ -n "$result" ]]; then
    notify-send "AUR Security Check" "Affected Packages Found:\n$result"
else
    notify-send "AUR Security Check" "None. No known compromised packages are installed."
fi

How It Works

  1. pacman -Qqm lists all manually installed AUR packages
  2. Fetches a known-compromised package list from CachyOS pastebin
  3. comm -12 finds packages in both lists (intersection)
  4. Sends a desktop notification with the result
  • [[Index]]