Arch Linux's AUR Sees More Than 400 Packages Compromised with Malware

m4631 pts0 comments

AUR REPORT THREAD - Aur-general - lists.archlinux.org

&times;<br>Keyboard Shortcuts

Thread View

j: Next unread message

k: Previous unread message

j a: Jump to all threads<br>j l: Jump to MailingList overview

AUR REPORT THREAD

older

Suspicious/malicious update to alvr

Jonathan Grotelüschen

11 Jun

2026

11 Jun

'26

11:47 a.m.

Hi everyone,

we’re working hard to reset/delete all malicious commits and ban the<br>accounts.

If you find more malicious packages, please **send them as a reply to<br>this email** to keep them all in one thread.

Thanks!

tippfehlr

Attachments:

OpenPGP_signature.asc<br>(application/pgp-signature — 228 bytes)

Show replies by date

Visit here for a non-javascript version of this page.

Age (days ago)

Last active (days ago)

List overview

Download

62 comments

25 participants

Add to favorites

Remove from favorites

tags

participants (25)

a821

Aaron Fischer

André Herbst

Cristian Pereira

Damien

fg-devel+archmail@mailbox.org

Frederick Zhang

Georg

Hans-Nikolai Viessmann

Iyán Méndez Veiga

Jared Sutton

Jeff Henson

Jerry Ling

Jonathan Grotelüschen

klemens@schoelhorn.eu

koraser@keemail.me

koraynilay

Lex Black

Mario Finelli

movq

Nicolai Dagestad

Nicolas Boichat

Pierre Chapuis

Rafał Lichwała

Storm Dragon

thread malicious packages report unread message

Related Articles