Arch Linux Malware Incident: Malicious Commits Found in 1,579 Packages
5 Articles
5 Articles
AUR to Arch: 'Houston, We've Got a Problem...We're Under Attack Again'
Just hours after Arch sounded the all‑clear on a massive AUR malware purge, a new, stealthier campaign is slipping malicious code back into user packages. The post AUR to Arch: ‘Houston, We’ve Got a Problem…We’re Under Attack Again’ appeared first on FOSS Force.
Within hours, attackers have identified more than 1,600 packages in the Arch User Repository ("AUR") with a pest that detects access data. However, anyone who only uses official packages via Pacman is not affected.
Arch Linux Malware Incident: Malicious Commits Found in 1,579 Packages
More than 1,500 user-contributed packages in the Arch Linux User Repository "AUR" were infected with malware, reports Phoronix: The last message in the thread over this security incident is noting that Arch Linux developers have deleted all the malicious commits they are aware of. Cited was this list that puts the number of malware-affected packages at 1,579... Even at 1,579 packages listed, that final updated noted, it's a "list containing many…
[Security Circle] Over 400 Arch Linux packages have been compromised, used to push rootkits and information-stealing programs.

Coverage Details
Bias Distribution
- There is no tracked Bias information for the sources covering this story.
Factuality
To view factuality data please Upgrade to Premium
