Where to report malware?

[anon89812132]

@Arikania

I installed Steam via the repo, whose client comes from some Github page.

You can actually check the PKGBUILD · master · Packages / multilib / steam · GitLab

And see that the source is this Index of /steam/pool/steam/s/steam/

And you can check further the validity of the package …

@Arikania

that pretty much proved to be malware

I have seen that before, and turned out that actually was 100% false positive. Unless you also provide the ways you arrived to your conclusion …

@Arikania

the pulldown menus showed the content of directories that only SuperUsers should have access to

You can have custom location for your games. Without access to see those locations you could not set them up, but that does not mean that it can write on all of those locations. I really recommend this reading:

[Tutorial] Understanding and working with UNIX filesystems and permissions

Difficulty: ★★★☆☆ Note: This post is meant as a tutorial. Please do not post on this thread regarding any problems you’re having with permissions, but start a new thread instead. Thank you. PREAMBLE: THE HISTORICAL BACKGROUND If you are new to the world of GNU/Linux ─ and especially if you come from the Microsoft Windows ecosystem ─ then you will undoubtedly have already noticed that GNU/Linux handles permissions and storage volumes quite differently from what you might be used to …

@Arikania

Furthermore, at random moments, some Steam updater kicks in, proving that Steam runs things in the background.

Please consult their knowledge base, it is stated quite clear what is what

Steam Support :: Managing Steam Downloads & Updates