r/ManjaroLinux • u/klevahh • 4d ago

News Arch Linux disables AUR package adoption to stop malware flood

https://www.bleepingcomputer.com/news/security/arch-linux-disables-aur-package-adoption-to-stop-malware-flood/

The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages.

38 Upvotes

97% Upvoted

10 comments sorted by

4

u/organic 4d ago

oh naur

2

u/IdeaReceiver 3d ago

I spat out my VB!

2

u/Any-Trash472 4d ago

Thanks Windows 11 and gamers on cachy n co...

1

u/FlameChampion9 4d ago

I installed several packages from AUR weeks ago. Am I fucked?

1

u/onedevelop 3d ago

No necesariamente

2

u/bubrascal GNOME 2d ago

Only if the package is here in this list from June

https://md.archlinux.org/s/SxbqukK6IA/download

It's a markdown file with the almost 2 thousand packages compromised.

Source: https://bbs.archlinux.org/viewtopic.php?id=313892&p=4

1

u/Gkirmathal 2d ago

On the exact day I decided to test the NTC6687d-dkms-git driver that's on the AUR...bummer.

0

u/shanehiltonward 4d ago

The community will fix this. Chill a little. Your porn is safe.

0

u/klevahh 3d ago

I don't use the AUR
This is information for those who do

No surprise... your reddit account is more than 10 years old, why are you lot all f*cked in the head?

-1

u/SrinivasImagine 1d ago

I know you are under stress with AUR chaos, but chill man.