A lightweight, automated security tool for Arch Linux and Arch-based distributions (like CachyOS or EndeavourOS). It scans your locally installed AUR packages against a live threat list of known compromised packages to protect against supply-chain attacks.
- The threat database is automatically synchronized daily at midnight UTC from the Arch Linux community list via GitHub Actions.
- Automated Threat Fetching: Dynamically pulls the latest threat list directly from the repository before every scan.
- Dual-Environment Support:
aur-scan-kde: A Fish script optimized for KDE Plasma users, utilizing Konsole and native window holds.aur-scan-universal: A POSIX-compliant Bash script for all other desktop environments (GNOME, XFCE, Hyprland, etc.).- Active Monitoring: Includes a systemd user timer to run background checks automatically every 12 hours.
- Desktop Alerts: Triggers native desktop notifications (
notify-send) if a compromised package is detected during a background scan.
- You can and encouraged to create and issue on GitHub but, if you
- Need or Want Help click the link to join telegram group or scan QR-code below
- Here you will get 🤝 Support & 👨💻 Developer Contact
You can build and install the package directly from source using standard Arch tooling.
# Clone the repository
git clone [https://github.com/Bradford1040/aur-blacklist-scanner.git](https://github.com/Bradford1040/aur-blacklist-scanner.git)
cd aur-blacklist-scanner
# Build and install the package
makepkg -siOnce installed, the tool integrates directly into your desktop environment's application launcher.
Open your launcher (Super/Meta key) and search for AUR Blacklist Scan.
-
Select (KDE) if you are running KDE Plasma.
-
Select (Universal) if you are running any other desktop environment.
To enable the 12-hour automated background checks, activate the included systemd user timer. The scanner will run silently and only alert you via a desktop notification if a compromised package is found.
Bash
systemctl --user enable --now aur-scanner.timer
To verify the timer is active and see when the next scan will run:
Bash
systemctl --user list-timers | grep aur-scanner
To completely remove the scanner, systemd services, and .desktop shortcuts from your system, disable the timer and remove the package using your AUR helper:
Bash
# Disable the background timer
systemctl --user disable --now aur-scanner.timer
# Remove the package
yay -Rns aur-blacklist-scanner-git