Attackers hijacked over 1,500 packages in Arch Linux's AUR to plant a credential stealer. The official repos are safe, but the trust model took the hit.

Arch Linux Supply Chain Malware, repo-slopscore & AI Model Security Concerns ...

Una vasta campagna malware ha colpito l'AUR di Arch Linux compromettendo centinaia di pacchetti e rubando credenziali.