Another Wave of Malicious AUR Packages, Package Adoptions Halted
4 hours ago
- A report on July 30, 2026, identified multiple AUR packages containing malicious ELF binaries, listed in a structured format.
- Robin Candau (Antiz) initially resolved the first batch by banning accounts and reverting commits, but later additional infected packages were reported by firstpick1992.
- After the second report, a follow-up response confirmed that all known infected packages, including the new list, should now be handled.
- The correspondence involved three participants: Saren (initial reporter), Robin Candau (AUR maintainer), and firstpick1992 (secondary reporter).