The Hacker News

Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit

Attackers hijacked 400+ Arch Linux AUR packages to run a Rust credential stealer, with optional eBPF rootkit support on root ...
How-To Geek on MSN

Arch Linux's largest software repo is blocking sign-ups due to a malware crisis

AUR was considered a looming security threat.
How-To Geek on MSN

I tested 9 Arch-based Linux distros, here's how I rank them

I've run Arch nine different ways, BTW.

Malicious apps got into the Arch User Repository - how to protect yourself

Malicious apps got into the Arch User Repository - how to protect yourself ...

Attack wave on Arch Linux: hundreds of package descriptions with malware in AUR

Arch Linux defends itself against a wave of attacks that have massively contaminated package descriptions in the unofficial Arch User Repository with malware.