Arch Linux locks AUR signups after malicious commits

Arch Linux disabled new account registration on the Arch User Repository after a wave of malicious commits. Over 1,500 user-submitted packages were compromised, with attackers pushing poisoned updates containing hostile JavaScript dependencies. The core Arch distribution remains unaffected.