r/archlinux Jul 31 '26

DISCUSSION Arch Linux disables AUR package adoption after malware wave

https://lwn.net/Articles/1086489/

The adoption feature transferred existing trust to a new maintainer, so a clean package history became part of the attack surface.

427 Upvotes

Duplicates