1 post
Arch Linux calls a 1500-package malware incident contained. An install path that skips verification was never a control, only a delivery channel.