Arch AUR Under Another Wave of Malicious Packages, Package Adoptions Halted

ImJamal1 pts0 comments

Arch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Halted - Phoronix

Articles & Reviews

News Archive

Forums

Premium Ad-Free<br>Contact

Popular Categories

Close

Articles & Reviews

News Archive

Forums

Premium

Contact

Categories

Computers Display Drivers Graphics Cards Linux Gaming Memory Motherboards Processors Software Storage Operating Systems Peripherals

Arch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Halted

Written by Michael Larabel in Arch Linux on 31 July 2026 at 09:59 AM EDT. 1 Comment

Last month the Arch Linux User Repository "AUR" saw more than 1,500 malicious packages amid a sophisticated malware attack and then also seeing an influx of spam and profanities amid this community/user-maintained repository for the popular Arch Linux distribution. Unfortunately, there is another round of AUR troubles.

The Arch Linux team announced that due to the current influx of malicious package adoptions, they have decided for now to disable package adoptions in AUR while they handle the situation. They encourage users as well to report suspicious adoption events/comments and to stay vigilant.

There is this mailing list thread outlining AUR malware from yesterday and today. There are dozens of AUR packages this round from i915-sriov-dkms to rtk-git, boringssl-git/hasher, archutil/linter, warp-terminal-git, weather-display, astro-box, and many others.

1 Comment

Tweet

Arch Linux's Archinstall 4.4 Adds Dank Material Shell + Niri Desktop Option<br>Russian Spam & Profanities Are Now Plaguing The Arch Linux AUR<br>Arch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attack<br>Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages<br>Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware<br>Manjaro 26.1 Preview Released With GNOME 50, KDE Plasma 6.6 & Xfce 4.20 Options

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.

Valve Sponsors Work Bringing Open-Source RADV Driver To Windows<br>"KVM Chainsaw" Expected To Hit Linux 7.3 For Dealing With God Data Structure<br>AMD P-State Linux Driver Patches Can Boost 1%-Low FPS Gaming Performance By 31%<br>Fedora 45 Atomic Desktops Look To Allow For Web-Based Remote Installations<br>Kiwi Menu Continues Bringing macOS Vibes To GNOME<br>Lemonade 11.5 Local AI Server Released With Completed Lemonade Router<br>Starling: A New Linux Desktop Written In Swift, Own Wayland Compositor & Written With AI<br>Ubuntu Linux Looking To Get Rid Of /etc/debian_version Historical Artifact

Arch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Halted

Linux 7.3 To Allow Tuning AMD P-State Dynamic EPP With Per CPU Core Granularity

Servo 0.4 Browser Engine Gets More Websites Rendering Correctly

Nouveau Patch For Linux 7.3 Allows For NVK Vulkan Video Atop NVIDIA NVDEC

x86_64 Shadow Stack By Default Retargeted For Fedora 46

Sound Fixes For Linux 7.2-rc6: "Far Larger Than Wished"

Linux 7.3 Will Treat Intel Nova Lake S Graphics As Stable

AMD Posts Linux Patches For HDMI 2.1 Auto Low-Latency Mode "ALLM" & VRR

AMD Zen 6 Client HSMP Patches Point To "Ryzen Master" Functionality On Linux

Huawei Considers Open-Sourcing A Half-Hearted Mesa Vulkan Driver

Patches Posted To Improve Linux Media Acceleration On Intel Alchemist GPUs

Five Proposals Now Being Weighed For Debian AI/LLM Usage

Phoronix Premium allows ad-free access to the site, multi-page articles on a single page, and other features while supporting this site's continued operations.

Nouveau vs. NVIDIA R610 On CachyOS With The GeForce RTX 5090 Laptop GPU

CachyOS Outperforming Windows 11, Slight Advantage Over Ubuntu & Fedora On AMD Ryzen AI 9 HX 470

Framework Laptop 13 Pro: Aiming To Be One Of The Best Upgradeable Linux Laptops

Snapdragon X Elite Laptop Experience Still Lackluster On Ubuntu 26.04 LTS

AMD EPYC 9006 Venice Announced & Looks Poised To Be A Grand Slam

The mission at Phoronix since 2004 has centered around enriching the Linux hardware experience. In addition to supporting our site through advertisements, you can help by subscribing to Phoronix Premium. You can also contribute to Phoronix through tips/donations via PayPal or Stripe.

Contact

Michael Larabel

Support Phoronix

While Having Ad-Free Browsing,

Single-Page Article Viewing

Facebook

Twitter / X

Legal Disclaimer, Privacy Policy, Cookies | Privacy Manager | Contact

Copyright &copy; 2004 - 2026 by Phoronix Media.

All trademarks used are properties of their respective owners. All rights reserved.

linux arch phoronix packages another malicious

Related Articles