Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware
The Arch Linux User Repository 'AUR' was hit by a large-scale malware campaign this week with more than 400 of these user-supplied packages being compromised.
Opening excerpt (first ~120 words) tap to expand
Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware Written by Michael Larabel in Arch Linux on 12 June 2026 at 06:39 AM EDT. 65 Comments The Arch Linux User Repository "AUR" was hit by a large-scale malware campaign this week with more than 400 of these user-supplied packages being compromised. Since yesterday Arch Linux maintainers have been working to reset/delete all of the malicious content and banning affected accounts. Over 400 packages are believed impacted by this latest malware campaign for Arch Linux's AUR. Again, to be completely clear, this just is affecting AUR packages and not the official Arch Linux packages. This Arch Linux mailing list thread goes over some of the affected AUR packages and the impact.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at Phoronix.