--- title: FOSS Weekly #26.25: AUR Supply Chain Attack, Commodore... description: This week's FOSS Weekly covers the AUR supply chain attack that hit over 1,500 Arch Linux packages, prompting new AUR registrations to be suspended and the Yay... canonical: https://daily.dev/posts/foss-weekly-26-25-aur-supply-chain-attack-commodore-phones-sonicde-y-server-kernel-7-1-and-mor-burls8kmp twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: FOSS Weekly #26.25: AUR Supply Chain Attack, Commodore Phones, SonicDE, Y Server, Kernel 7.1 and More | daily.dev og:description: This week's FOSS Weekly covers the AUR supply chain attack that hit over 1,500 Arch Linux packages, prompting new AUR registrations to be suspended and the Yay... og:url: https://daily.dev/posts/foss-weekly-26-25-aur-supply-chain-attack-commodore-phones-sonicde-y-server-kernel-7-1-and-mor-burls8kmp og:image: https://api.daily.dev/og/posts/BuRls8Kmp.png og:image:alt: FOSS Weekly #26.25: AUR Supply Chain Attack, Commodore Phones, SonicDE, Y Server, Kernel 7.1 and More og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # FOSS Weekly #26.25: AUR Supply Chain Attack, Commodore Phones, SonicDE, Y Server, Kernel 7.1 and More **[It's Foss](https://daily.dev/sources/itsfoss)** · 7 min read · 0 upvotes · 0 comments ## Summary This week's FOSS Weekly covers the AUR supply chain attack that hit over 1,500 Arch Linux packages, prompting new AUR registrations to be suspended and the Yay helper to release a protective update. Other highlights include Linux kernel 7.1 with a new NTFS driver, KDE Plasma 6.7 with vintage themes, a new Rust-based X11 server (yserver) as a counter to X11 deprecation, a SonicDE fork preserving X11 on KDE, and the Commodore/Jolla Sailfish OS flip phone. Also covered: CachyOS's new Rust package manager Shelly, DocLang open document standard for AI pipelines, and an AI agent running amok on Fedora's Bugzilla after a compromised contributor account. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [FOSS Weekly \#26.03: Torvalds Using AI, Dash to Dock, Linux Kernel Bugs, Pacman's Rust Replacement and More](https://daily.dev/posts/foss-weekly-26-03-torvalds-using-ai-dash-to-dock-linux-kernel-bugs-pacman-s-rust-replacement-an-z5dj7vonp) · It's Foss · 0 upvotes · 0 comments - [FOSS Weekly \#26.20: Killswitch in Linux, Fedora's AI Move, Rat in Terminal, KDE Dolphine Tweaks and More](https://daily.dev/posts/foss-weekly-26-20-killswitch-in-linux-fedora-s-ai-move-rat-in-terminal-kde-dolphine-tweaks-and--rth8txs9j) · It's Foss · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#open-source](https://daily.dev/tags/open-source), [#linux](https://daily.dev/tags/linux) [View this post on daily.dev](https://daily.dev/posts/foss-weekly-26-25-aur-supply-chain-attack-commodore-phones-sonicde-y-server-kernel-7-1-and-mor-burls8kmp) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"FOSS Weekly #26.25: AUR Supply Chain Attack, Commodore Phones, SonicDE, Y Server, Kernel 7.1 and More","url":"https://daily.dev/posts/foss-weekly-26-25-aur-supply-chain-attack-commodore-phones-sonicde-y-server-kernel-7-1-and-mor-burls8kmp","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/foss-weekly-26-25-aur-supply-chain-attack-commodore-phones-sonicde-y-server-kernel-7-1-and-mor-burls8kmp"},"datePublished":"2026-06-18T15:07:31.621Z","dateModified":"2026-06-18T17:39:56.991Z","description":"This week's FOSS Weekly covers the AUR supply chain attack that hit over 1,500 Arch Linux packages, prompting new AUR registrations to be suspended and the Yay...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/fa74620076a674b682b8054354fee88a?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/fa74620076a674b682b8054354fee88a?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"It's Foss","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"It's Foss","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/582e3faed71842bfb9d3840a787d6700","url":"https://daily.dev/sources/itsfoss"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/foss-weekly-26-25-aur-supply-chain-attack-commodore-phones-sonicde-y-server-kernel-7-1-and-mor-burls8kmp","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,open-source,linux","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"It's Foss","item":"https://daily.dev/sources/itsfoss"},{"@type":"ListItem","position":3,"name":"FOSS Weekly #26.25: AUR Supply Chain Attack, Commodore Phones, SonicDE, Y Server, Kernel 7.1 and More"}]} ```