--- title: "After the AUR Malware Flood, Yay v13 Lets You Script Your Own Safety Net" url: https://daily.dev/posts/after-the-aur-malware-flood-yay-v13-lets-you-script-your-own-safety-net-im91b6ujd source_url: https://feed.itsfoss.com/link/24361/17363250/yay-v13-release type: article source: "It's Foss" published: 2026-06-18T13:04:34.561Z updated: 2026-06-18T13:05:00.950Z tags: ["security", "linux", "lua"] reading_time: 3 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # After the AUR Malware Flood, Yay v13 Lets You Script Your Own Safety Net **[It's Foss](https://daily.dev/sources/itsfoss)** · 3 min read · 0 upvotes · 0 comments ## Summary Yay v13, the popular AUR helper for Arch Linux, introduces two new features in response to the recent AUR malware flood that compromised over 1,500 packages. First, search results and upgrade menus now display a PKGBUILD last-modified timestamp as an extra signal to help users spot potentially risky packages. Second, Lua-based hooks and configuration are now supported via an init.lua file, enabling users to automate package review at various points in the install and upgrade flow. Key hooks include AURPreInstall (fires after PKGBUILD fetch, before any menus), AURPostDownload (fires after source verification), and UpgradeSelect (fires during yay -Syu before the exclusion screen). The existing config.json remains supported, with init.lua overriding it and CLI flags taking highest priority. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Arch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attack](https://daily.dev/posts/arch-linux-aur-hit-by-another-wave-of-now-more-sophisticated-malware-attack-cuifsfguq) · Phoronix · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#linux](https://daily.dev/tags/linux), [#lua](https://daily.dev/tags/lua) [View this post on daily.dev](https://daily.dev/posts/after-the-aur-malware-flood-yay-v13-lets-you-script-your-own-safety-net-im91b6ujd)