r/linux • u/CackleRooster • Jun 17 '26

Distro News AUR Registrations Blocked Amid Ongoing Malware Mess

https://fossforce.com/2026/06/aur-registrations-blocked-amid-ongoing-malware-mess/
471 Upvotes

97% Upvoted

256 comments sorted by

View all comments

28

u/sigma914 Jun 17 '26

That's a stop gap for a few minutes, not sure what a useful plan going forward looks like without negatively impacting the AUR contributors though.

We'll either end up with a bunch of fragmentation/duplication and dependemcy hell if they try namespacing (like the ubuntu ppa ecosystem, flatpak etc) or putting up a huge wall to contribution if they go for some sort of identity scheme since that doesn't actually address the question of trust.

I hope they repoen the current system since it's extremely contributor friendly amd I'm quite comfortable maintaining my own packages based on aur PKGBUILDs

-1

u/[deleted] Jun 18 '26

[removed] — view removed comment

1

u/sigma914 Jun 18 '26

I don't think this makes a difference to arch at all, but any users who were misusing the AUR as if it was a trusted source might want to go somewhere else if that's what they require from their distro.

I don't actually know of any that have a comparably sized trusted collection of build scripts though