Hasty Briefsbeta

aur

3 stories total

Bilingual

AUR Packages Adoption And Pushes Disabled
2 months ago
- Package adoption on AUR is temporarily disabled due to malicious adoptions and commits.
- Users are advised to report suspicious adoption events or commits.
- All pushes to AUR have been disabled to handle the security situation.
- The Arch Linux DevOps team is working on resolving the issue and will send a follow-up.
Arch Linux disables AUR package adoption
2 months ago
- Arch Linux DevOps team disabled adoption of orphaned packages in the AUR due to malicious package adoptions and follow-up commits.
- The malware is a remote-access trojan (RAT) that communicates over the Tor network and attempts to upload user data.
- New account registration was suspended in June after a similar attack, and reopened on July 13 with ineffective restrictions.
Registration of new accounts to the Arch AUR reopened with hardened requirements
2 months ago
- Registration to AUR was temporarily disabled due to malicious packages.
- Registration is now reopened after cleanup.
- New security measures: disposable email addresses rejected, mandatory email verification with 24-hour token, email changes locked during cooldown.
- Users encouraged to flag suspicious activity.

firstprev0next