16 October 2026 · 1 min read
Fake Arch Linux packages distribute malware with root privileges
Summary: A threat actor uploaded malicious packages to the Arch User Repository (AUR) impersonating popular helper tools, yay and paru. These packages distribute malware with root privileges. This incident involves a …