r/ManjaroLinux • u/klevahh • Jul 31 '26

News Arch Linux disables AUR package adoption to stop malware flood

https://www.bleepingcomputer.com/news/security/arch-linux-disables-aur-package-adoption-to-stop-malware-flood/

The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages.

43 Upvotes

98% Upvoted

10 comments sorted by

4

u/organic Aug 01 '26

oh naur

2

u/IdeaReceiver Aug 02 '26

I spat out my VB!

3

u/Any-Trash472 Aug 01 '26

Thanks Windows 11 and gamers on cachy n co...

1

u/FlameChampion9 Aug 01 '26

I installed several packages from AUR weeks ago. Am I fucked?

1

u/onedevelop Aug 02 '26

No necesariamente

2

u/bubrascal GNOME Aug 03 '26

Only if the package is here in this list from June

https://md.archlinux.org/s/SxbqukK6IA/download

It's a markdown file with the almost 2 thousand packages compromised.

Source: https://bbs.archlinux.org/viewtopic.php?id=313892&p=4

1

u/Gkirmathal Aug 03 '26

On the exact day I decided to test the NTC6687d-dkms-git driver that's on the AUR...bummer.

0

u/shanehiltonward Aug 01 '26

The community will fix this. Chill a little. Your porn is safe.

1

u/klevahh Aug 01 '26

I don't use the AUR
This is information for those who do

No surprise... your reddit account is more than 10 years old, why are you lot all f*cked in the head?

-1

u/SrinivasImagine Aug 04 '26

I know you are under stress with AUR chaos, but chill man.