Just in case, if someone is using Arch Linux or one of its derivatives, and has installed Inform7 from the AUR repo, it seems that the package is unsafe. There’s been a mass attack against lots of AUR packages to install malicious software, and inform7 is in the suspect list. The situation is recent and it seems to be changing fast, so I’m not that sure about how to proceed. I’d advise uninstalling it.
3 Likes
It doesn’t look like anyone is advising uninstalling it: just avoid updating it until they get the malicious package installer scripts removed?
I was under the impression that the attack had been happening for some time and had been just recently detected, but I may be wrong.
Looks like the attack on the Inform7 package happened on the day you warned about it (Jun 12, 2026)
And it looks like it has been undone now
2 Likes
Most users probably know about the Flatpak version already, but just in case:
I’ve been using the Flatpak version of Inform since I originally ran into issues trying to install the AUR one years ago, and (if I recall correctly) it’s currently the recommended package for non-Debian based distros.
Haven’t had any issues with it except one bug that seems to be resolved now.
Grab the flatpak files here:
or
1 Like