Atomic Arch: 400+ AUR Packages Backdoored with eBPF Rootkit and Credential Stealer (opens in new tab)

Covers 3 stories including Attackers Hijack Trusted AUR Packages to Deliver Rootkit Malware

An AUR supply chain attack compromised more than 400 Arch Linux packages from 11 June 2026, planting a Rust credential stealer and an eBPF rootkit that hides from standard inspection tools. on .

Read the original article