To potentially prevent this entire class of npm attacks in the future, you could edit /etc/pacman.conf, uncomment

# Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
#IgnorePkg   =

And set it to IgnorePkg = npm

Your system should prompt you to accept installing npm because it's in the ignore list. These packages set it as a dependency, so that gives you a chance to notice that something's off and refuse the install. This assumes you don't already have npm installed or need it for some reason.

https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/FGXPCB3ZVCJIV7FX323SBAX2JHYB7ZS4/

edit: word is that bun command is being abused as well and may be worthwhile including in the space separated list:

IgnorePkg = npm bun

the yolo distro, using their users as guinea pigs to test patches that haven't even gone upstream yet

now to wait another eternity for wine to have the cross process rendering piece, and another eternity for it to get into proton, since now they just run steam itself in the runtime instead of native

calling people pigs does a disservice to sus scrofa domesticus. it matters that it's humans doing these things to other humans

been testing this quite a lot for star citizen which regularly sees 20-40 GB use. zram is the easiest solution to avoiding OOM Killer by a long shot. zswap was swapping over 100 GB to disk cumulative throughout the day and still oom killing the game. zswap is also a pain in the ass to configure for the lay user and harder to get human readable stats. I don't want lay users going anywhere near their bootloader but zswap is all kernel command line to make permanent changes

oh wow the third xda post of the year about ntsync. it's been on since November 2025 btw

lmao

eyeballing it, that all looks like stuff that an organization of that scale would have to spend money on, and better the entity and its sponsors paying instead of kernel developers

sed forever

steady hand and a magnetized needle is all I need. kernel is bloat