Arch AUR Under Another Wave of Malicious Packages, Package Adoptions Halted
5 hours ago
- Last month, the AUR experienced over 1,500 malicious packages due to a sophisticated malware attack and an influx of spam and profanities.
- A new wave of malicious packages has emerged, prompting the Arch Linux team to temporarily disable package adoptions in the AUR.
- Users are urged to report suspicious adoption events and comments and remain vigilant.
- A mailing list thread documents dozens of affected packages, including i915-sriov-dkms, rtk-git, and others.