Arch User Repository
Coverage of Arch User Repository in the Nexus archive.
- Pushes to arch AUR are suspendended right now.
Pushes to the Arch User Repository (AUR) are currently suspended, as announced in an official communication from the aur-general mailing list. The article includes links to the discussion thread and Hacker News comments, with 33 points and 6 comments recorded.
- Arch Linux disables AUR package adoption to stop malware flood
The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages following a surge in malicious takeovers of existing packages.
- 400+ Arch Linux AUR Packages Hijacked to Install Rust Credential Stealer
Attackers hijacked over 400 packages in the Arch User Repository (AUR) to install a Rust-based credential stealer that harvests developer secrets. The malware can load an eBPF rootkit to hide itself when executed with root privileges. The AUR is a community-maintained package collection separate from Arch Linux's official repository.