---
title: "Hundreds of AUR packages compromised"
url: https://daily.dev/posts/hundreds-of-aur-packages-compromised-qfoj9ykq1
source_url: https://lwn.net/Articles/1077718
type: article
source: "LWN.net"
published: 2026-06-12T13:41:55.975Z
updated: 2026-06-12T13:42:20.763Z
tags: ["cyber", "linux", "npm"]
reading_time: 1
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Hundreds of AUR packages compromised

**[LWN.net](https://daily.dev/sources/lwn)** · 1 min read · 0 upvotes · 0 comments

## Summary

Hundreds of orphaned Arch User Repository (AUR) packages have been compromised by an attacker who injected a malicious npm package called 'atomic-lockfile' capable of exfiltrating sensitive data. The Arch Linux project is actively cleaning up the affected packages. A list of compromised packages is available, and users of Arch Linux or Arch-based distributions who use AUR packages are advised to check whether they have installed any of the affected updates.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://lwn.net/Articles/1077718>

## Similar posts on daily.dev

- [lists.archlinux.org](https://daily.dev/posts/lists-archlinux-org-vtya7bvfc) · Lobsters · 12 upvotes · 1 comments
- [Over 400 Arch Linux packages compromised to push rootkit, infostealer](https://daily.dev/posts/over-400-arch-linux-packages-compromised-to-push-rootkit-infostealer-f7ileezok) · BleepingComputer · 94 upvotes · 7 comments

---

Tags: [#cyber](https://daily.dev/tags/cyber), [#linux](https://daily.dev/tags/linux), [#npm](https://daily.dev/tags/npm)

[View this post on daily.dev](https://daily.dev/posts/hundreds-of-aur-packages-compromised-qfoj9ykq1)