--- title: Arch Linux's AUR is under attack as malicious packages... description: Arch Linux's AUR (Arch User Repository) is experiencing a second wave of malicious package adoptions in under two months, following a similar incident in... canonical: https://daily.dev/posts/arch-linux-s-aur-is-under-attack-as-malicious-packages-begin-flooding-the-repository-gbi6ujhiu twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Arch Linux's AUR is under attack as malicious packages begin flooding the repository | daily.dev og:description: Arch Linux's AUR (Arch User Repository) is experiencing a second wave of malicious package adoptions in under two months, following a similar incident in... og:url: https://daily.dev/posts/arch-linux-s-aur-is-under-attack-as-malicious-packages-begin-flooding-the-repository-gbi6ujhiu og:image: https://api.daily.dev/og/posts/GBi6uJHIU.png og:image:alt: Arch Linux's AUR is under attack as malicious packages begin flooding the repository og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Arch Linux's AUR is under attack as malicious packages begin flooding the repository **[XDA Developers](https://daily.dev/sources/xda-developers)** · 2 min read · 0 upvotes · 0 comments ## Summary Arch Linux's AUR (Arch User Repository) is experiencing a second wave of malicious package adoptions in under two months, following a similar incident in mid-June that saw over 1,500 malicious packages. The Arch Linux DevOps team has temporarily disabled package adoptions while cleaning up the attack. A non-exhaustive list of identified malware has been published. Users are advised to carefully review packages before installing and to check the published malware list. KDE Linux has already dropped the AUR from its build pipeline over security and reliability concerns, and skipping the AUR entirely remains a valid option for cautious users. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [News: Active AUR malicious packages incident](https://daily.dev/posts/news-active-aur-malicious-packages-incident-0vefqnwsb) · Arch Linux · 4 upvotes · 0 comments - [Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware](https://daily.dev/posts/arch-linux-s-aur-sees-more-than-400-packages-compromised-with-malware-rajulib7a) · Phoronix · 0 upvotes · 0 comments - [Arch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attack](https://daily.dev/posts/arch-linux-aur-hit-by-another-wave-of-now-more-sophisticated-malware-attack-cuifsfguq) · Phoronix · 1 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#linux](https://daily.dev/tags/linux), [#malware](https://daily.dev/tags/malware) [View this post on daily.dev](https://daily.dev/posts/arch-linux-s-aur-is-under-attack-as-malicious-packages-begin-flooding-the-repository-gbi6ujhiu) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Arch Linux's AUR is under attack as malicious packages begin flooding the repository","url":"https://daily.dev/posts/arch-linux-s-aur-is-under-attack-as-malicious-packages-begin-flooding-the-repository-gbi6ujhiu","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/arch-linux-s-aur-is-under-attack-as-malicious-packages-begin-flooding-the-repository-gbi6ujhiu"},"datePublished":"2026-07-31T19:48:13.196Z","dateModified":"2026-08-03T17:44:55.170Z","description":"Arch Linux's AUR (Arch User Repository) is experiencing a second wave of malicious package adoptions in under two months, following a similar incident in...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/973da4f63623adf38d202c8eba3c5c67?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/973da4f63623adf38d202c8eba3c5c67?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"XDA Developers","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"XDA Developers","logo":"https://media.daily.dev/image/upload/s--kCg6yyAP--/f_auto,q_auto/v1774964407/logos/xda-developers?_a=BAMAMiWQ0","url":"https://daily.dev/sources/xda-developers"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/arch-linux-s-aur-is-under-attack-as-malicious-packages-begin-flooding-the-repository-gbi6ujhiu","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,linux,malware","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"XDA Developers","item":"https://daily.dev/sources/xda-developers"},{"@type":"ListItem","position":3,"name":"Arch Linux's AUR is under attack as malicious packages begin flooding the repository"}]} ```