https://hackingpassion.com/tags/aur/Recent content in AUR on HackingPassion.com : root@HackingPassion.com-[~]HugoenSat, 13 Jun 2026 12:46:22 +0200https://hackingpassion.com/atomic-arch-aur-malware/Sat, 13 Jun 2026 12:46:22 +0200https://hackingpassion.com/atomic-arch-aur-malware/<p>More than 400 packages in the Arch User Repository (AUR) were hijacked this week, and the attacker never broke into a single system to do it. They took over packages whose makers had walked away, then let people install the malware during a routine update they had no reason to question. 🐧</p> <p>The AUR is the place where community members write and share the recipes for installing software that is not in the official Arch repositories. Publishing there is open to the community, and Arch based systems pull straight from it. That openness is one of the reasons people love Arch, and it is also why this played out the way it did. The official Arch repositories were never touched.</p>