TLDR InfoSec · QUICK LINKS

ARCH LINUX SUSPENDS AUR PACKAGE ADOPTIONS TO BLOCK ONGOING MALICIOUS COMMIT CAMPAIGN

gbhackers.com2 min read

Summary from the TLDR InfoSec newsletter

Arch Linux's DevOps team disabled AUR package adoptions platform-wide on July 30 after attackers began systematically adopting orphaned/unmaintained packages and pushing malicious PKGBUILD commits that execute payloads via makepkg.