Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages - Phoronix
Articles & Reviews
News Archive
Forums
Premium Ad-Free<br>Contact
Popular Categories
Close
Articles & Reviews
News Archive
Forums
Premium
Contact
Categories
Computers Display Drivers Graphics Cards Linux Gaming Memory Motherboards Processors Software Storage Operating Systems Peripherals
Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages
Written by Michael Larabel in Arch Linux on 12 June 2026 at 08:55 PM EDT. 37 Comments
The day started out with Arch Linux's AUR user-contributed repository seeing more than 400 packages compromised with malware. Now in ending out the day they believe all affected commits have been addressed. But it ended up being more than 1,500 affected packages.
It was bad enough when finding out more than 400 AUR packages for Arch Linux users had been infected with malware but now that number has risen to around 900 a few hours ago and now in the end at more than 1,500 user-contributed packages.
In an update a few hours ago, it was believed around 900 packages were infected by malware in this week's incident.
Then as of writing now, the last message in the thread over this security incident is noting that Arch Linux developers have deleted all the malicious commits they are aware of. Cited was this list that puts the number of malware-affected packages at 1,579! Tons of software in this user-maintained Arch Linux user repository were impacted by this nasty security incident.
Even at 1,579 packages listed, that final updated noted, it's a "list containing many (but not all) of the affected packages". Ouch.
37 Comments
Tweet
Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware<br>Manjaro 26.1 Preview Released With GNOME 50, KDE Plasma 6.6 & Xfce 4.20 Options<br>CachyOS Introduces New Default GUI Package Manager, Kyber For NVMe I/O Scheduler<br>CachyOS Rolls Out A Super-Charged Linux 7.0 Kernel<br>Arch Linux's Archinstall 4.2 Fixes Botched Disk Encryption Security<br>Archinstall 4.0 Released For Improved Arch Linux Installer Using Textual UI
Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.
macOS 27 Beta Breaks The Ability To Boot Asahi Linux<br>Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware<br>Firefox Merges Support For Vulkan Video Decoding<br>ReactOS "Open-Source Windows" Reaches The Milestone Of Being Able To Run Half-Life<br>Qualcomm Gets The Lenovo Yoga Slim 7x Gen11 Snapdragon X2 Laptop Working On Linux<br>YSERVER: Modern X11 Server Written In Rust With The Help Of Claude Code<br>Linux 7.2 Will Be Able To Boot On Apple M3 Macs - But Far From Useful For End-Users<br>GNOME File Previewer Finally Switches To GTK4, Adds Dark Mode
Intel Thermald 2.5.12 Released... With Initial Support For ARM
GCC 17 Merges Function Multi-Versioning For APX & AVX10.2
Haiku OS Now Enables AVX-512 Support, Other Hardware Improvements
KDE Plasma 6.7 Sees Last Minute Fixes Ahead Of Next Week's Release
Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages
OpenZFS 2.4.3 Released With Many Bug Fixes
Wine 11.11 Released With Wayland Improvements
AMD Opens Pre-Orders For The Linux-Friendly Ryzen AI Halo Developer Platform
Linux 7.2 Features Expected: Apple M3, Initial AMDGPU HDMI 2.1 FRL, USB4STREAM, Cache Aware Scheduling
The Best Features Of Linux 7.1: FRED, New NTFS Driver & More Performance
New NTFS Linux Driver Being Improved For Windows Native Symbolic Links
AVX-512 Optimization For Linux RAID Showing Up To 41% Improvement On AMD Ryzen 9 9950X
Phoronix Premium allows ad-free access to the site, multi-page articles on a single page, and other features while supporting this site's continued operations.
Open-Source Success Achieved For Greater Transparency & Security: Running AMD openSIL + Coreboot On EPYC
Benchmarking The Performance Benefits To Ubuntu 26.10 amd64v3 Packages
RISC-V CPU Performance Up 8x In Five Years: SiFive HiFive Unmatched To SpacemiT K3
Linux 7.1 Helping Intel Arc Battlemage Graphics Achieve Better Performance
ARM Linux Server Performance Up More Than 7x Geo Mean In 8 Years, As Much As 15x With NVIDIA Vera CPU
The mission at Phoronix since 2004 has centered around enriching the Linux hardware experience. In addition to supporting our site through advertisements, you can help by subscribing to Phoronix Premium. You can also contribute to Phoronix through tips/donations via PayPal or Stripe.
Contact
Michael Larabel
Support...