At least 1,500 malicious packages were published to the Arch User Repository (AUR) as part of the Atomic Arch supply chain attack.

Arch Linux Supply Chain Malware, repo-slopscore & AI Model Security Concerns ...

Una vasta campagna malware ha colpito l'AUR di Arch Linux compromettendo centinaia di pacchetti e rubando credenziali.

Community repo freezes new accounts after attackers swamp it with poisoned package updates

L'Arch User Repository (AUR) di Arch Linux � finito nel mirino di un attacco su larga scala: un malware nascosto negli script di installazione ha compromesso oltre 1.900 pacchetti…

At least 1,500 malicious packages were published to the Arch User Repository (AUR) as part of the Atomic Arch supply chain attack.

Attackers hijacked over 1,500 packages in Arch Linux's AUR to plant a credential stealer. The official repos are safe, but the trust model took the hit.

For the second time in a week, the AUR was found to contain malicious applications. What can Arch Linux users do about this?