--- title: Arch Linux's AUR Sees More Than 400 Packages Compromised... description: A large-scale malware campaign has compromised over 400 packages in the Arch Linux User Repository (AUR). Arch Linux maintainers have been working to reset and... canonical: https://daily.dev/posts/arch-linux-s-aur-sees-more-than-400-packages-compromised-with-malware-rajulib7a twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware | daily.dev og:description: A large-scale malware campaign has compromised over 400 packages in the Arch Linux User Repository (AUR). Arch Linux maintainers have been working to reset and... og:url: https://daily.dev/posts/arch-linux-s-aur-sees-more-than-400-packages-compromised-with-malware-rajulib7a og:image: https://api.daily.dev/og/posts/raJUlIB7A.png og:image:alt: Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware **[Phoronix](https://daily.dev/sources/phoronix)** · 1 min read · 0 upvotes · 0 comments ## Summary A large-scale malware campaign has compromised over 400 packages in the Arch Linux User Repository (AUR). Arch Linux maintainers have been working to reset and delete malicious content and ban affected accounts since the incident began. Only AUR packages are affected — official Arch Linux packages remain uncompromised. Discussion is ongoing in the Arch Linux mailing list and CachyOS forums. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages](https://daily.dev/posts/arch-linux-now-believes-malware-incident-under-control-more-than-1-500-affected-packages-74hachsvu) · Phoronix · 2 upvotes · 1 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#linux](https://daily.dev/tags/linux), [#malware](https://daily.dev/tags/malware) [View this post on daily.dev](https://daily.dev/posts/arch-linux-s-aur-sees-more-than-400-packages-compromised-with-malware-rajulib7a) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware","url":"https://daily.dev/posts/arch-linux-s-aur-sees-more-than-400-packages-compromised-with-malware-rajulib7a","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/arch-linux-s-aur-sees-more-than-400-packages-compromised-with-malware-rajulib7a"},"datePublished":"2026-06-12T10:43:00.202Z","dateModified":"2026-06-12T10:43:26.800Z","description":"A large-scale malware campaign has compromised over 400 packages in the Arch Linux User Repository (AUR). Arch Linux maintainers have been working to reset and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/6a89bb695e55b3c3bf5107d8be0d05e1?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/6a89bb695e55b3c3bf5107d8be0d05e1?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Phoronix","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Phoronix","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/6a26ba379dd64932830aa0c9803dd7ee","url":"https://daily.dev/sources/phoronix"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/arch-linux-s-aur-sees-more-than-400-packages-compromised-with-malware-rajulib7a","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,linux,malware","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Phoronix","item":"https://daily.dev/sources/phoronix"},{"@type":"ListItem","position":3,"name":"Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware"}]} ```