World Wires · story 47460 · corroborated · 1 source(s)

Malicious Arch Linux packages pushed to AUR with root privileges

A threat actor uploaded malicious packages impersonating helper tools yay and paru to the Arch User Repository to compromise systems.

Open in the desk

Coverage

• Malicious Arch Linux packages pushed to AUR with root privileges BleepingComputer · tier C · clear net · 2026-10-15 17:12 UTC

What this site indexes