TLDR InfoSec · QUICK LINKS
ARCH LINUX SUSPENDS AUR PACKAGE ADOPTIONS TO BLOCK ONGOING MALICIOUS COMMIT CAMPAIGN
Summary from the TLDR InfoSec newsletter
Arch Linux's DevOps team disabled AUR package adoptions platform-wide on July 30 after attackers began systematically adopting orphaned/unmaintained packages and pushing malicious PKGBUILD commits that execute payloads via makepkg.