alt.hn

6/12/2026 at 6:27:06 PM

Over 900 Arch Linux Packages Infected with infostealers and rootkits

 https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/FGXPCB3ZVCJIV7FX323SBAX2JHYB7ZS4/#5FDTMKA54RMWNRHJFUAKXEBAFV5WPDUL

by fortran77

6/12/2026 at 6:37:26 PM

Very misleading title. AUR "recipes" are NOT official Arch Linux packages. Basically anyone can upload stuff to the AUR. Users are expected to read and understand the AUR PKGBUILDs before trying to build them.

by mdlxxv

6/12/2026 at 10:38:17 PM

"Over 900 packages infected in a repository anyone can upload to, it just has to be compatible with Arch"

by tiberious726