Back to article
thehackernews.com

Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit (opens in new tab)

Covers 3 stories See all stories this covers including AUR Packages Attacked by InfostealerCovered by 7 sources See all sources covering this story including news.tuxmachines.org, Malware Analysis, News and Indicators

Covers 3 related stories

lists.archlinux.org·

AUR Packages Attacked by Infostealer

Discussed on Hacker News, Hacker News, and Lobsters
Feeds
sonatype.com·

Attackers Hijack Trusted AUR Packages to Deliver Rootkit Malware

Discussed on Hacker News and r/Malware
Feeds
ioctl.fail·

Preliminary Analysis of AUR Malware

Discussed on Hacker News
Feeds

Covered in 7 articles

news.tuxmachines.org·

Active AUR malicious packages incident

Feeds
Malware Analysis, News and Indicators·

15th June – Threat Intelligence Report

Feeds
4sysops·

Arch Linux suspends AUR registrations following massive supply chain attack

Feeds
Latest Hacking News·

Atomic Arch: 400+ AUR Packages Backdoored with eBPF Rootkit and Credential Stealer

Feeds
igor´sLAB·

LeakWatch 2026 – Week 24/25, two weeks behind and a rather clear trend

Feeds
AboutDFIR·

Infosec News Nuggets — June 15, 2026

Feeds
Check Point Research·

15th June – Threat Intelligence Report

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help