KDE warns of malware in third-party Neonova wallpaper
The security team says a GitHub Plasma extension has shipped hidden malware, while readers question whether the published evidence still matches the repository.
KDE's security team says NeoNova Animated Wallpaper, a third-party Plasma extension published on GitHub, has been shipping malware. Anyone who installed the wallpaper outside KDE's own sources may have run code that was deliberately hidden inside what looked like a decorative extension.
David Edmundson published the warning, which says the hidden malware has been present since the project's initial commit. The extension is not an official KDE wallpaper.
Readers of the notice questioned how firmly the public repository supports that account. One decoded a base64 string cited in the write-up and found only color values used by the wallpaper's configuration, unchanged when the extension runs. Others suggested later commits may have been taken down, which would explain why the visible history does not show an obvious malicious change and why the warning does not point to a specific commit that can be checked.
The practical consequence is unchanged either way: Plasma will happily run third-party extensions, and animated wallpapers are an easy lure for packages KDE does not review. Until Plasma itself offers that kind of wallpaper, the safer choice is to stay with the official set.