Malware Detected in Over 1,500 Arch Linux AUR Packages
More than 1,500 user-contributed packages within the Arch Linux User Repository (AUR) have been infected with malware. Arch Linux developers have reportedly deleted all malicious commits they have identified in response to the security incident. While a specific list indicates 1,579 affected packages, it has been noted that this figure may not encompass the full extent of the compromise.
Malware has been identified in a significant number of user-contributed packages residing in the Arch Linux User Repository (AUR).
Reports indicate that over 1,500 packages were compromised. A list made public cites 1,579 specific packages as being affected by the malicious commits. However, this list is not exhaustive and is stated to contain "many (but not all)" of the impacted packages, suggesting the total count could be higher.
In response to the security incident, Arch Linux developers have taken action by deleting all malicious commits they are aware of. This measure aims to mitigate the threat and restore the integrity of the affected packages within the AUR.
According to Phoronix, the incident highlights potential vulnerabilities within user-contributed software ecosystems. (Source: Slashdot)
Advertisement
AdSense slot • inline
