Russian Spam and Profanities Are Now Plaguing the Arch Linux AUR

2OEH8eoCRo02 pts0 comments

Russian Spam & Profanities Are Now Plaguing The Arch Linux AUR - Phoronix

Articles & Reviews

News Archive

Forums

Premium Ad-Free<br>Contact

Popular Categories

Close

Articles & Reviews

News Archive

Forums

Premium

Contact

Categories

Computers Display Drivers Graphics Cards Linux Gaming Memory Motherboards Processors Software Storage Operating Systems Peripherals

Russian Spam & Profanities Are Now Plaguing The Arch Linux AUR

Written by Michael Larabel in Arch Linux on 15 June 2026 at 12:43 PM EDT. 76 Comments

After days of dealing with 1,500+ packages in the Arch Linux AUR containing malware, the latest headache in the Arch Linux User Repository is Russian spam and offensive messages.

Nicolas Boichat with his AI/LLM detection bot detected some questionable messages appearing in AUR content. Russian messages were being added post-install to the bashrc / zshrc / Fish configuration, etc containing offensive messaging. Those commits happened on the 14th, after the recent malware fiasco.

And then over the past day reporting on dozens of AUR packages having similar Russian messages containing offensive language.

The latest update on that thread indicates more than 70 AUR packages having this Russian spam / offensive messaging. Among those various Python packages, Ruby packages, Llama.cpp, and others.

At least the AI/LLM bots are proving helpful here in proactively picking up on some of the AUR abuses until the fundamental situation can be better handled.

76 Comments

Tweet

Arch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attack<br>Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages<br>Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware<br>Manjaro 26.1 Preview Released With GNOME 50, KDE Plasma 6.6 & Xfce 4.20 Options<br>CachyOS Introduces New Default GUI Package Manager, Kyber For NVMe I/O Scheduler<br>CachyOS Rolls Out A Super-Charged Linux 7.0 Kernel

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.

Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages<br>ReactOS "Open-Source Windows" Reaches The Milestone Of Being Able To Run Half-Life<br>Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware<br>Arch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attack<br>Russian Spam & Profanities Are Now Plaguing The Arch Linux AUR<br>YSERVER: Modern X11 Server Written In Rust With The Help Of Claude Code<br>AMD Opens Pre-Orders For The Linux-Friendly Ryzen AI Halo Developer Platform<br>Linux 7.1 Released: New NTFS Driver, Intel FRED For Panther Lake, Faster Arc Graphics

systemd 261 Released With New systemd-sysinstall OS Installer, IMDSD & Storagectl

AMD ACP7.D/7.E/7.F Driver Added In Linux 7.2: "Substantial Design Changes" For AMD Audio

Linux 7.2 Brings More Work Around WiFi Aware, WiFi 8 / UHR & More Networking Hardware

Raspberry Pi OS Moves To Linux 6.18 LTS Kernel, Updated LabWC Compositor

Apple M3 Booting On Linux After Three Years Plus Other SoC Updates In Linux 7.2

AMD Introduces An AI-Powered Bash Coding Agent

ARCTIC Fan Controller, More ASUS & ASRock Boards Have Sensor Monitoring With Linux 7.2

AMD ISP4 Driver Merged To Linux 7.2 Kernel

Linux 7.2 Gets Rid Of The Last Optimized MD5 Implementation

Godot 4.7 Released With HDR Output Support

EXT4 Reworks Fast Commit Handling & Faster Directory Hash Computation

Rust PNG Image Decoder Now Even Faster: Benefiting Chrome, GNOME, Etc

Phoronix Premium allows ad-free access to the site, multi-page articles on a single page, and other features while supporting this site's continued operations.

How NVIDIA Vera CPU Performance Compares To The Ampere Altra Max

Intel Core Ultra X7 Panther Lake Performance On Linux 7.1

Open-Source Success Achieved For Greater Transparency & Security: Running AMD openSIL + Coreboot On EPYC

Benchmarking The Performance Benefits To Ubuntu 26.10 amd64v3 Packages

RISC-V CPU Performance Up 8x In Five Years: SiFive HiFive Unmatched To SpacemiT K3

The mission at Phoronix since 2004 has centered around enriching the Linux hardware experience. In addition to supporting our site through advertisements, you can help by subscribing to Phoronix Premium. You can also contribute to Phoronix through tips/donations via PayPal or Stripe.

Contact

Michael Larabel

Support Phoronix

While Having Ad-Free Browsing,

Single-Page Article Viewing

Facebook

Twitter / X

Legal Disclaimer, Privacy Policy, Cookies | Privacy Manager | Contact

Copyright &copy; 2004 - 2026 by Phoronix...

linux arch packages phoronix russian malware

Related Articles