本次攻击事件已基本结束。
npm 上的
atomic-lockfile包已经被替换为不包含恶意文件的占位符版本。
该文章已被设为隐藏文章。您只可能从已保存的URL处访问该文章。
以下是所有受影响的包（根据邮件列表）：
123pan-bin
1code
8192eu-dkms-git
actual-ai
adblock2privoxy
aion-git
albion-online-launcher-bin
android-signapk
android-signapk-gui
annobin
ansible-language-server
antfs-cli-git
anythingllm-appimage
apk-installer-gui
apm_planner-bin
apothem
apple-music-desktop
arch-update-vai
archjh
archlinux-themes-slim
archmage
archtex-git
artanis-git
astro-editor-appimage
autolabel
autologin
bcachefs-kernel-dkms-git
beebeep
bitcoin-core-git
blinkenlib
blueproximity-py3-git
booklore
brow6el
brow6el-git
canon-pixma-mg3000-complete-fixed
cartridge-cli
ccl-git
cgminer
charcoal
cinny-desktop-system-tray
clai
clang19
clash-mi
cmuclmtk
codenomad-bin
codeql-cli-bin
colorhug-client
colorz
compiler-rt19
compizconfig-python
coolreader
cowdancer
cutefish-calculator
cutefish-core
cutefish-dock
cutefish-filemanager
cutefish-icons
cutefish-launcher
cutefish-qt-plugins
cutefish-screenlocker
cutefish-screenshot
cutefish-settings
cutefish-statusbar
cutefish-wallpapers
cvs-feature-bin
cynthiune.app
dagu-bin
datatype99
dep
dh-python
difi
difi-bin
doctoc
dots-hyprland-fork-git
dvdrip
dyad-bin
edconv-bin
eisl
epson-inkjet-printer-escpr2-clos-bin
exodus-wallet-bin
exoduswallet
farmmod-hub
fastjet
fatx
fcitx5-pinyin-sougou-dict-git
ffmpeg-bitrate-stats
ffmpeg-quality-metrics
findpkg-git
firefox-extension-adnauseam-bin-amo
firmium-desktop-git
fishui
fishui-git
flexiblas
flynarwhal
fmlib
forgecode-bin
formidable-bin
frame
frutool
futhark-bin
gdl
gdlmm
git-annex-standalone
gnome-contacts-git
gnutls3.8.9
gopher2600
gopher2600-bin
gosh
gpx-viewer
graveman
green-tunnel-bin
greetd-wlgreet-git
gtkimageview
guile-reader
gummy
gummy-git
hackmatrix-git
harmony-wad
hearthstone-linux-gui-appimage
hearthstone-linux-gui-bin
hepmc2
hister-git
hnswlib-git
horst
hydownloader-git
hydrus-git
i3bar-river
ianny-bin
ibm-sw-tpm2
ihaskell-git
imageglass
inadyn
indicator-session
infnoise-openssl-git
interface99
ios-webkit-debug-proxy
ipfs-desktop-bin
ipsw
iron-heart-git
jasp-desktop
k3sup
kdb
kddockwidgets-git
kexi
kiss
kookbook
kproperty
kreport
latex-digsig
lazylpsolverlibs-git
lib32-egl-wayland
libafterimage
libbobcat
libcutefish
libffi-static
libgdata
libjxl-noglycin
libquvi
libquvi-scripts
libretro-hatari-enhanced-git
libxdiff
libxml-ruby
libyami
linux-cachyos-deckify-native
linux-cachyos-native
linux-cachyos-rc-native
linux-tool
liri-cmake-shared-git
lite
lll
llvm-cbe-git
lowfi-bin
ls++
lucidvideo
m5rcode
magpie-wm
mako-center-git
manuskript
maszyna-git
mathsat-5
matrixbrandy
mcp-probe
mermaid-ascii-git
mermark-editor
mesa-dlss-reflex-git
mimic-node-git
mingw-w64-geos
mingw-w64-libsndfile
minimax-bin-hardened
misuzu-music-bin
mono-addins
monochrome
monochrome-git
moor-git
mopen
n1-translator
naemon
naemon-livestatus
natapp
nebuchadnezzar-git
neovim-autopairs-git
neovim-nvim-treesitter
nerf-pi
neuro-karaoke-wrapper-git
new-api-privacy-filter
new-api-privacy-filter-git
nexus-bin
nginx-mod-vts
nhentai-git
nocodb
noctyra-dotfiles-git
notepad---bin
nox-bin
nrpe
nwchem-bin
ob-xd
octocode
opencode-codebase-index-bin
openui5
opl-synth
optimizevideo-git
oracle-bin
pacforge
paper-desktop-bin
paq8o
parallel-python
pass-cli
pelican-git
penguin-subtitle-player
perl-proc-parallelloop
perl-set-object
perl-term-extendedcolor
phonon-qt5-vlc
php-geoip
php-memcache
php-openswoole-git
php-xdiff
picom-ftlabs-git
pidgin-kwallet
pipetoys
pipewire-visualizer-git
premake-git
prisma4postgres-bin
profile-sync-daemon-zen
pymacs
python-awkward
python-calmjs
python-celery
python-ci-info
python-coolname
python-dataproperty
python-dictobject
python-dj-database-url
python-fastmcp-slim
python-firebase-admin
python-fmu_manipulation_toolbox
python-g4f
python-hist
python-histoprint
python-hsaudiotag3k
python-iminuit
python-iso3166
python-isr-git
python-jsmin
python-json2xml
python-luckydonald-utils
python-milvus-lite-bin
python-mmcif
python-monotonic
python-mplhep
python-mplhep_data
python-netaudio-git
python-netaudio-lib
python-newspaper4k
python-nipype
python-nodejs-wheel
python-openai-harmony
python-pdf2docx
python-piecash
python-pluginmgr
python-poetry-plugin-dotenv
python-pushbullet.py
python-pychromecast-git
python-pylsp-rope
python-pymilvus
python-pysocks-git
python-scikit-hep-testdata
python-sklearn-pandas
python-sqliteschema
python-starlette-compress
python-starsessions
python-steamcontroller-git
python-tabledata
python-tarantool
python-uhi
python-uproot
python-vector
python-xtarfile
python2-appdirs
python2-fusepy
python2-lazr-uri
python2-notify
python2-packaging
python2-paver
python2-pyparsing
python2-simplejson
python2-simplepare
python2-stomper
python2-twodict-git
python2-xlib
qhttpengine
qlementine
qmdnsengine
qnapi
qobuz-player-bin
qtum-core
quickswitch-i3
r-dbplyr
reactphysics3d
repoporge
retibbs-client-git
rhythmbox-git
rimworld
rog-helper-git
ros2-humble-nav2-msgs
ruah-orch
ruby-excon
ruby-kramdown-rfc2629
ruby-selenium-webdriver
runescape-launcher
sakura-launcher-gui
sandlock
screenpipe-bin
sdcc-bin
seahorse-nautilus
shhmsg
shhopt
slipnet
slipnet-bin
smenu
smenu-git
smolrtsp
smolrtsp-libevent
snry-shell-qs
soapyptezuka
sonosano
soundpaad-bin
sshuttlee
sshuttlee-bin
stompbox-jack-git
stripe-cli
stylelint-config-recommended
subbrute
sublist3r-git
subprocess
subsync
svu
sway-xkb-switcher
tack
tarantool
tesseract-gui
thunar-nextcloud-plugin
thunderbird-conversations
tinyemu
tlpui-git
touchhle
touchosc-bin
transcreen
tsm
tunacode-cli
typing-game-cli
ukui-notification-daemon
vapoursynth-preview-git
vbam-git
verso-git
vidcutter
vim-easymotion
vim-gitgutter
vim-indent-object
vim-molokai
vim-solidity
vim-vital
vocalinux-git
voquill-gpu
wallpaper-generator-next
wayland-static
we-layerd-git
whatsie-git
whisper2tr
whisper2tr-git
windowmaker-git
wine-nine
wire-desktop
word-snatchers-cli
workbench
workbuddy-bin
wrystr-git
wsjtx-beta
xorg-xfsinfo
xplot
xpra-html5
xray-domain-list-community
yarg
yt6801-dkms
yy
zerx-lab-dida-bin
zerx-lab-zed-nightly-bin
zing-21-bin
cling-git
ttf-material-design-icons-git
jd-gui
cnijfilter-common
i3bar-river
xf86-input-mtrack-git
easy_spice
ftl
zsdx
mount-gtk
mcpatcher
torch7-git
arm-linux-gnueablhf-binutils
您可以检查：将上面的代码块复制到本地文件（例如virus-check），然后在终端执行 Bash 指令：
comm -12 <(pacman -Qq | sort) <(sort virus-check)
该输出包含与上述列表重叠的包。