Attackers hijacked 400+ Arch Linux AUR packages to run a Rust credential stealer, with optional eBPF rootkit support on root ...

Looks like the Arch Linux AUR (Arch User Repository) needs some better security and package checks - as some malicious users ...

AUR was considered a looming security threat.

A wave of malicious commits hit the Arch User Repository (AUR) over the weekend, prompting the team to disable new account ...

Malicious apps got into the Arch User Repository - how to protect yourself ...

An AUR supply chain attack compromised more than 400 Arch Linux packages from 11 June 2026, planting a Rust credential ...

Attackers hijacked over 1,500 packages in Arch Linux's AUR to plant a credential stealer. The official repos are safe, but the trust model took the hit.

Arch Linux defends itself against a wave of attacks that have massively contaminated package descriptions in the unofficial Arch User Repository with malware.

Keep Arch Linux clean and stable with these six essential maintenance tasks, from package updates to orphan removal and ...

The Arch Linux team has warned users for years about verifying each AUR package before installing it. The Arch Linux team is the second Linux distro that has found malware on its user-submitted ...

Before attempting to install a .deb package on Arch Linux, it is crucial to first check if the software is available in the official Arch repositories or the Arch User Repository (AUR). This step ...