Arch Linux disables AUR package adoption

Global World Sun, 02 Aug 2026 13:44:21 GMT Moderate confidence — 64/100

The Arch Linux DevOps team has announced that adoption of orphaned packages in the Arch User Repository (AUR) has been disabled due to "the current influx of malicious package adoptions and follow-up commits made via the AUR".
Michael Taggart has posted a brief analysis of the malware being added to a long list of packages in this round of attacks.
The payload appears to be an remote-access trojan (RAT) that takes commands over the Tor network and attempts to upload a wide range of user data.

The Arch Linux DevOps team has announced that adoption of orphaned packages in the Arch User Repository (AUR) has been disabled due to "the current influx of malicious package adoptions and follow-up commits made via the AUR".
Michael Taggart has posted a brief analysis of the malware being added to a long list of packages in this round of attacks.
The payload appears to be an remote-access trojan (RAT) that takes commands over the Tor network and attempts to upload a wide range of user data.

Sources: Lwn