#arch linux Tech News.

Arch Linux confirms malware in more than 1,500 packages. The incident is under control. Affected packages are being quarantined and updated. Users are advised to reinstall critical software. The root cause is traced to a compromised build server.

Attackers hijacked over 400 Arch User Repository packages by adopting orphaned projects and rewriting build scripts to install a Rust credential stealer. The malware can load an eBPF rootkit if run with root privileges. The official Arch repositories were not affected. Users who installed or updated AUR packages on or after June 11 should check affected-package lists.

Attackers took over more than 400 packages in the Arch User Repository (AUR) and rewrote their build scripts to install a Rust-based credential stealer. The malware can also load an eBPF rootkit if run with root. The official Arch repositories were not affected. The campaign, named Atomic Arch, targeted orphaned packages whose maintainers had abandoned them.

Over 400 packages in the Arch User Repository are distributing a Linux rootkit and infostealer malware. A new maintainer is spoofing a trusted publisher to push infected packages. The malware, named atomic-lockfile, targets credentials and access tokens from developer tools and services.

An infostealer attack compromised hundreds of Arch User Repository packages. The malware targeted credentials and sensitive data from users who installed the affected packages. The incident raises security concerns about the trust model of community-maintained package repositories.