AUR Compromised - 400+ packages affected - 20260611 (opens in new tab)  🐚Shell Languages  Content type: Discussion

As recently there appears to have been a large coordinated attack on the AUR some time within the last 24 hours that seems to have resulted in a rather sizable amount of packages being contaminated with malware. This is a good reminder that the AUR is open, unofficial, user-produced, content. The only secure way to use the Arch User Repository is by reviewing every PKGBUILD. While efforts are now underway to clean out any problem packages there still exists the possibility that some users may...