Some AUR packages were uploaded containing malware (2025-07-18 & 2026-06-11)

[Yochanan]

Now that Arch has an official announcement, I’ve created a new thread:

Active AUR malicious packages incident

Discussion has been ongoing since the first incident began yesterday in the previous thread: Some AUR packages were uploaded containing malware (2025-07-18 & 2026-06-11) - #50 by Yochanan Active AUR malicious packages incident 2026-06-12 - Campbell Jones We are currently experiencing a high volume of malicious package adoptions and updates in the Arch User Repository. We are actively working to track down existing malicious commits and attempting to prevent additional malicious commits from …