Arch Linux is currently facing a significant wave of malicious package adoptions and updates within the Arch User Repository (AUR).
The team is actively working to track down existing malicious commits and prevent additional ones from being pushed. While this effort is underway, and as a more permanent solution is developed, users may encounter disruptions with the following:
- Creating new accounts on the AUR
- Pushing package updates
- Adopting or creating new packages
All AUR users are strongly urged to review every change to PKGBUILD and install scripts when updating packages, particularly during this period. If you spot any suspicious commits in a package you use, please contact the Arch staff via the aur-general mailing list with details.
