#aur
-
Fake Arch Linux packages delivered root-level malware
A threat actor uploaded AUR packages posing as the popular yay and paru helpers, bundling legitimate code with a malicious script that ran with root privileges.
-
Arch Linux Veteran Morten Linderud Leaves the Project After 10 Years
Developer, security team member and maintainer of numerous packages Morten “Foxboron” Linderud has announced his departure from Arch Linux, leaving a number of key packages without a maintainer.
-
Arch Linux Disables Adoption of “Orphaned” AUR Packages After Attacks
The Arch Linux DevOps team has temporarily banned the adoption of orphaned packages in the AUR: attackers were seizing them en masse and planting a remote access trojan.