On 7/31/26 5:31 PM, Jared Sutton wrote:
Good day everyone,

I was getting a new laptop setup and found this package published just today to AUR:

https://aur.archlinux.org/packages/brave-origin <https:// aur.archlinux.org/packages/brave-origin>

It includes an ELF binary called "translator" in the sources, though it's unclear if it has an execution path currently enabled. I believe the brave-origin-bin package to be published by brave themselves, so this one looks like it's just trying to fool users.

Any way you slice it, it's very suspicious and is worth a review. I'm having Claude dig into the binary to see what it can find.

Regards,
Jared

Hi,

Thanks for the report, the package has been removed.

--
Regards,
Robin Candau / Antiz

Attachment: OpenPGP_0xFDC3040B92ACA748.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to