Everyone and everything is vulnerable.

A trip to the brewery.

Arch Linux on Monday announced that it has suspended new account registrations on the Arch User Repository (AUR) in response to a wave of malicious packages being published as part of an ongoing ...

Oh dear, the situation with the Arch Linux AUR got a fair bit worse since GamingOnLinux initially covered the malicious packages. The AUR developers and maintainers are clearly going to need to ...

Update - 18:55 UTC - The Arch Linux team put up an official announcement now: We are currently experiencing a high volume of malicious package adoptions and updates in the Arch User Repository. We are ...

More than 400 packages in the Arch User Repository (AUR) are distributing a Linux rootkit and infostealer malware targeting credentials and access tokens. A report from the open-source intelligence ...

Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a ...

GitHub has announced what it said are "breaking changes" coming to npm version 12, one of which turns off install scripts by default to combat software supply chain threats. The changes aim to combat ...

Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of Linux is setting off alarm bells as defenders scramble to ward off severe ...

4. Flash the Arch Linux ISO to a USB drive (8 GB or larger): If you're on Linux/macOS, you can flash the ISO to your USB drive using dd command: dd bs=4M if=archlinux-*.iso of=/dev/sdX conv=fsync ...

CachyOS and EndeavorOS are both Arch-based Linux distros. Both make using Arch Linux much easier, but one is faster than the other. You can download and install both ...