News for hackers. Stuff that matters.

A comment on Google serving sponsored link to Homebrew site clone with malware. Parent comment

Re:Google serving sponsored link to Homebrew site clone with... by hollin on Monday January 20, 2025 @12:46PM (#42771118)
Is there any way to check if you're affected? I just happened to install Homebrew while the malicious site was up and now I'm not sure if I installed the legit version.
[ Parent | on HN ]
Re:Google serving sponsored link to Homebrew site clone with... by Shank on Monday January 20, 2025 @01:06PM (#42771345)
Check if /tmp/update exists. If it does, you’re infected.
[ Parent | on HN ]
Re:Google serving sponsored link to Homebrew site clone with... by seenukarthi on Tuesday January 21, 2025 @11:16PM (#42788944)
I think the malware tries to delete this file. So, it won't be a reliable method to identify whether you were infected.
[ Parent | on HN ]