Arch Linux disables AUR package adoption
4 hours ago
- Arch Linux DevOps team disabled adoption of orphaned packages in the AUR due to malicious package adoptions and follow-up commits.
- The malware is a remote-access trojan (RAT) that communicates over the Tor network and attempts to upload user data.
- New account registration was suspended in June after a similar attack, and reopened on July 13 with ineffective restrictions.