Detection and analysis tools for the atomic-lockfile supply-chain attack on the Arch User Repository (AUR), generalized to a campaign-based architecture that handles multiple concurrent and historical ...
Summary The security-guidance plugin's security_reminder_hook.py flags eval( using a bare substring match with no word boundary, so it false-positives on any identifier ending in ...eval immediately ...