{"dataType":"CVE_RECORD","dataVersion":"1.0","cveMetadata":{"cveId":"GCVE-110-AUR-2026-005899","assignerOrgId":"","assignerShortName":"Vulnetix","state":"PUBLISHED","datePublished":"2026-10-23T13:50:52Z","dateUpdated":"2026-10-23T13:50:52Z","dateReserved":""},"containers":{"cna":{"providerMetadata":null,"title":"","descriptions":[{"lang":"en","value":"The Arch User Repository (AUR) package `keymux` was flagged as malicious by automated PKGBUILD analysis (1 indicator(s)). Building or installing this package may execute attacker-controlled code. This verdict is produced by static analysis and is subject to human review.","supportingMedia":null},{"lang":"en","value":"[P-INSTALL-KERNEL-MOD] Kernel module loading in install script — matched: echo \"    sudo modprobe uinput\"","supportingMedia":null}],"references":[{"url":"https://aur.archlinux.org/packages/keymux","name":"","tags":["advisory"]},{"url":"https://github.com/noahlyk/keymux","name":"","tags":["web"]},{"url":"https://github.com/noahlyk/keymux/releases/download/v1.9.3/keymux-1.9.3-x86_64.tar.gz","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/LICENSE","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/systemd/keymux.service","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/systemd/keymux-niri.service","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/systemd/keymux-hyprland.service","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/systemd/keymux-sway.service","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/systemd/keymux-i3.service","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/systemd/keymux-bspwm.service","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/openrc/keymux","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/openrc/keymux-niri","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/openrc/keymux-hyprland","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/openrc/keymux-sway","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/openrc/keymux-i3","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/openrc/keymux-bspwm","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/runit/keymux/run","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/runit/keymux/log/run","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/runit/keymux-niri/run","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/runit/keymux-niri/log/run","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/runit/keymux-hyprland/run","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/runit/keymux-hyprland/log/run","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/runit/keymux-sway/run","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/runit/keymux-sway/log/run","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/runit/keymux-i3/run","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/runit/keymux-i3/log/run","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/runit/keymux-bspwm/run","name":"","tags":["web"]},{"url":"https://raw.githubusercontent.com/noahlyk/keymux/v1.9.3/runit/keymux-bspwm/log/run","name":"","tags":["web"]}],"metrics":null,"problemTypes":[{"descriptions":[{"lang":"en","description":"Embedded Malicious Code","cweId":"CWE-506","type":"CWE"}]}],"affected":[{"vendor":"aur","product":"keymux","collectionURL":"https://aur.archlinux.org","packageName":"keymux","repo":"","defaultStatus":"","versions":[{"version":"1.9.2-1","status":"affected","versionType":"","lessThan":"","lessThanOrEqual":"","changes":null}],"cpes":null,"modules":null,"programFiles":null,"platforms":null}],"cpeApplicability":null,"rejectedReasons":null,"replacedBy":null},"adp":null}}