Arch Linux disables AUR package adoption
Arch Linux has disabled the adoption of orphaned packages in the Arch User Repository (AUR) following a surge in malicious activity. Attackers have been using compromised accounts to inject remote-access trojans into legitimate software packages.
The Arch Linux DevOps team has announced that adoption of orphaned packages in the Arch User Repository (AUR) has been disabled due to " the current influx of malicious package adoptions and follow-up commits made via the AUR ". Michael Taggart has posted a brief analysis of the malware being added to a long list of packages in this round of attacks. The payload appears to be an remote-access trojan (RAT) that takes commands over the Tor network and attempts to upload a wide range of user data.
Get the full story
Sign up for Headlinne to unlock AI insights, political bias analysis, and your personalized news feed.
Create free accountAlready have an account? Sign in