Note that the link in that latest comment is just a wall of AI slop text, not an actual analysis made by a human. Not worth clicking on.
Search Criteria
Package Details: alvr 20.14.1-4
Package Actions
| Git Clone URL: | https://aur.archlinux.org/alvr.git (read-only, click to copy) |
|---|---|
| Package Base: | alvr |
| Description: | Experimental Linux version of ALVR. Stream VR games from your PC to your headset via Wi-Fi. |
| Upstream URL: | https://github.com/alvr-org/ALVR |
| Keywords: | alvr games steamvr streaming vr |
| Licenses: | MIT |
| Conflicts: | alvr |
| Provides: | alvr |
| Submitter: | m00nw4tch3r |
| Maintainer: | krisztinavarga |
| Last Packager: | tippfehlr |
| Votes: | 30 |
| Popularity: | 0.111697 |
| First Submitted: | 2021-09-23 21:53 (UTC) |
| Last Updated: | 2026-06-11 16:49 (UTC) |
Dependencies (22)
- alsa-lib
- bash (bash-gitAUR, bash-devel-gitAUR)
- bzip2 (bzip2-gitAUR)
- gcc-libs (gcc-libs-gitAUR, gccrs-libs-gitAUR, gcc-libs-fast-optimizedAUR, gcc-libs-snapshotAUR)
- glibc (glibc-gitAUR, glibc-git-native-pgoAUR, glibc-eacAUR)
- hicolor-icon-theme (hicolor-icon-theme-gitAUR)
- libdrm (libdrm-gitAUR)
- libpipewire (libpipewire-gitAUR, libpipewire-full-gitAUR, libpipewire-ldacAUR)
- libunwind (libunwind-carbonAUR, libunwind-gitAUR)
- libva-drm.so (libva-gitAUR, libva-headlessAUR, lib32-libva, libva)
- libva.so (libva-gitAUR, libva-headlessAUR, lib32-libva, libva)
- libx11 (libx11-gitAUR)
- vulkan-icd-loader (vulkan-icd-loader-gitAUR)
- x264 (x264-tmod-gitAUR, x264-gitAUR, x264-patmanmod-gitAUR)
- cargo (rust-beta-binAUR, rustup-gitAUR, rust-gitAUR, rust, rustup) (make)
- clang (llvm-gitAUR, clang-minimal-gitAUR, clang17-binAUR, clang-static-gitAUR) (make)
- git (git-gitAUR, git-glAUR, git-wd40AUR) (make)
- imagemagick (imagemagick-full-gitAUR, imagemagick-gitAUR, imagemagick-essentials-gitAUR, imagemagick-fullAUR) (make)
- libxrandr (libxrandr-gitAUR) (make)
- nasm (nasm-gitAUR) (make)
- Show 2 more dependencies...
Required by (0)
Sources (2)
Reonu commented on 2026-06-12 16:13 (UTC)
thx1138 commented on 2026-06-12 14:41 (UTC)
"Preliminary analysis of AUR malware"
https://ioctl.fail/preliminary-analysis-of-aur-malware/
MegaShinySnivy commented on 2026-06-11 17:12 (UTC)
Yeah, this is just malware at this point.
yobson commented on 2026-06-11 16:10 (UTC) (edited on 2026-06-11 16:17 (UTC) by yobson)
from a quick look im 99% sure this is malware. krisztinavarga took over the package and made a commit with the git name PLYSHKA, impersonating the previous legitimate maintainer. the NPM package atomic-lockfile that it installs in /tmp was published yesterday and runs a preinstall install script ./src/hooks/deps which is a rust binary. i don't know what that binary does but i can't see a legitimate reason any of that would've happened.
https://www.npmjs.com/package/atomic-lockfile
edit: yeah just looking at the strings of the deps binary it seems it's an info stealer to grab cookies, discord auth tokens, etc
TNE commented on 2026-06-11 15:51 (UTC)
Suspicious change, be careful:
Caught by chaotic-aur manual review.
yobson commented on 2026-03-15 00:00 (UTC)
the icon doesnt work for me because the alvr.pngs are owned by root and has 600 perms so only root can view it
PLYSHKA commented on 2025-08-05 14:58 (UTC)
@xilota oops, i shouldn't have trusted namcap too blindly... will fix it soon
PLYSHKA commented on 2025-08-03 23:15 (UTC) (edited on 2025-08-03 23:15 (UTC) by PLYSHKA)
As far as i tested, with mandatory vrmonitor launch argument, i did not need PRESSURE_VESSEL_FILESYSTEMS_RO anymore.
If anyone still requires it for alvr to function, please let me know, otherwise i will unpin current comments.
Pinned Comments
m00nw4tch3r commented on 2024-09-03 10:22 (UTC)
Troubleshooting Guide: https://github.com/alvr-org/ALVR/wiki/Linux-Troubleshooting
DocMAX commented on 2024-09-01 10:41 (UTC)
Needs PRESSURE_VESSEL_FILESYSTEMS_RO="/usr/lib/steamvr/alvr/" to make it work. Please include this.