The Arch User Repository Was Infiltrated

The Arch Linux User Repository (AUR) was recently struck with one of its biggest infiltrations in recent memory. With over 1500+ packages being marked as unsafe and compromised due to the looming threat of an infostealer... what's happening, really?

⊹・・・・✦・・・・⊹

Credits:
[Art]
1. Summoning Book: https://ko-fi.com/s/294471ba8d
2. Table: https://ko-fi.com/s/046de5036d
3. Rubber Duck: https://ko-fi.com/s/bdcf2ba721
4. Everything else: https://pixabay.com/users/openclipart-vectors-30363/

[BGM]
(In order of appearance)
1. Satoshi Okubo - Rainy Night
2. Satoshi Okubo - Deceptive Proof
3. Satoshi Okubo - City Dyed Purple
4. Satoshi Okubo - One Night

[Sources]
1. Arch Linux. AUR submission guidelines. ArchWiki. https://wiki.archlinux.org/title/AUR_submission_guidelines
2. Arch Linux. Package maintainer guidelines. ArchWiki. https://wiki.archlinux.org/title/Package_Maintainer_guidelines
3. ArchWiki. Arch User Repository. https://wiki.archlinux.org/title/Arch_User_Repository
4. Arch Maintainers. Compromised package list. https://md.archlinux.org/s/SxbqukK6IA
5. Larabel, M. (2026, June 14). Arch Linux AUR hit by another wave of now more sophisticated malware attack. Phoronix. https://www.phoronix.com/news/Arch-Linux-AUR-More-Malware
6. Larabel, M. (2026, June 15). Russian spam & profanities are now plaguing the Arch Linux AUR. Phoronix. https://www.phoronix.com/news/Arch-Linux-AUR-Russian-Spam
7. Rudra, S. (2026, June 13). Arch Linux pulls the plug on new AUR registrations after malware flood. It's FOSS. https://itsfoss.com/news/arch-linux-aur-malware-flood/
8. Taggart. (2026, June 12). 400+ AUR packages compromised with infostealer and rootkit. IFIN Network. https://discourse.ifin.network/t/400-aur-packages-compromised-with-infostealer-and-rootkit/577
9. Whanos. (2026, June 11). Preliminary analysis of AUR malware. ioctl.fail. https://ioctl.fail/preliminary-analysis-of-aur-malware/
10. AUR report thread. (2026, June 12). aur-general mailing list archives. Arch Linux Mailing Lists. https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/FGXPCB3ZVCJIV7FX323SBAX2JHYB7ZS4/

Other relevant sources are otherwise mentioned in the video. Otherwise, please contact me if I'm missing some!

⊹・・・・✦・・・・⊹

My Bluesky:
https://bsky.app/profile/morgan-von-asteria.bsky.social

⊹・・・・✦・・・・⊹

My Fellow Banner Characters:

▸Geminyan
Bluesky: https://bsky.app/profile/geminy4n2x.bsky.social
YouTube: https://www.youtube.com/@GemiNy4n2x

⊹・・・・✦・・・・⊹

Asterisk Order Official Website: https://asterisk-order.neocities.org/

#vtuber #envtuber #vtuberen #linux #tech

Видео The Arch User Repository Was Infiltrated канала Morgan von Asteria