Looks like the Arch Linux AUR (Arch User Repository) needs some better security and package checks - as some malicious users ...

Attackers hijacked 400+ Arch Linux AUR packages to run a Rust credential stealer, with optional eBPF rootkit support on root ...

At least 1,500 malicious packages were published to the Arch User Repository (AUR) as part of the Atomic Arch supply chain ...

Attackers hijacked over 1,500 packages in Arch Linux's AUR to plant a credential stealer. The official repos are safe, but the trust model took the hit.

Malicious apps got into the Arch User Repository - how to protect yourself ...

Customer stories Events & webinars Ebooks & reports Business insights GitHub Skills ...