Arch User Repository
AssessPlatforms
A community-maintained package repository for Arch Linux.
Why it's here
Placed in Assess: 1 article(s) of evidence from 1 source(s), led by security coverage, with 1 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.
Evidence (1)
- 8Hacker News·7/31/2026securityArch Linux disables AUR orphaned package adoption
Arch Linux has disabled adoption of orphaned packages in the Arch User Repository after a wave of malicious takeovers and follow-up commits through the AUR. The attack campaign involved newly created accounts pushing malware-laced updates, including a remote-access trojan that communicated over Tor and attempted to exfiltrate user data.