Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware
Over 400 user-contributed packages on the Arch Linux User Repository have been compromised in a widespread supply chain attack.
Velocity
How fast coverage is spreading — measured hourly from article rate × source diversity. How this works →
The brief
A campaign has targeted the Arch Linux User Repository (AUR), resulting in the compromise of more than 400 packages. The malicious activity involves the deployment of infostealers, a Rust-based credential stealer, and an eBPF rootkit via hijacked package descriptions and dependencies.
Coverage from outlets including Phoronix, The Hacker News, and Sonatype emphasizes that the campaign utilizes an "Atomic Arch" methodology to distribute malicious code. Reports from heise online, GamingOnLinux, and Linuxiac highlight that the threat specifically affects user-contributed content within the repository.
Future developments will focus on the remediation of affected packages and potential security updates for the AUR ecosystem. Details regarding the identities of the attackers or the full extent of impacted user systems are currently unspecified.
Synthesized by PULSE from the headlines below under a strict no-invention contract. ✓ fact-checked: all claims supported by sources Updated 154d ago.
Quick answers
How many packages were affected?
Coverage indicates that more than 400 packages within the Arch Linux User Repository were compromised.
What types of malware are involved?
Reported threats include infostealers, a Rust credential stealer, and an eBPF rootkit.
What is the name of this campaign?
The campaign has been referred to by sources such as Security Boulevard and Sonatype as "Atomic Arch."
Coverage (9)
- Attack wave on Arch Linux: hundreds of package descriptions with malware in AUR heise online · 154d ago
- 400+ Arch Linux AUR Packages Hijacked to Install Rust Credential Stealer The Hacker News · 154d ago
- Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit The Hacker News · 154d ago
- 400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers CyberSecurityNews · 154d ago
- The Arch Linux AUR had over 400 packages compromised with malware GamingOnLinux · 154d ago
- Atomic Arch npm Campaign Adds Malicious Dependency Security Boulevard · 154d ago
- Arch Linux AUR Malware Campaign Hits Multiple User-Contributed Packages Linuxiac · 154d ago
- Atomic Arch: Attackers Hijack Trusted AUR Packages to Deliver Rootkit-Like Malware Sonatype · 154d ago
- Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware Phoronix · 154d ago
Topics
Related trends
OpenAI launches security products, tells orgs they’re doomed if they don’t use them
OpenAI launches Daybreak Red Team and Defense Factory security tools while warning organizations they face doom without them.
FBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
Federal authorities seize over $1.2 billion in cryptocurrency following a massive $6.3 billion hack linked to North Korea.
Maersk confirms data breach as WhiteArmor ransomware demands $5 million
Maersk confirms data breach as WhiteArmor ransomware gang demands $5 million ransom, marking latest cyber hit on global shipping.
Lego marketplace BrickLink offline after 'unusual activity' detected
Lego's BrickLink marketplace remains offline for a fifth day after the company detected unusual activity, disrupting sellers and delaying a major designer program announcement.
If hackers can take over a supermarket fridge, what else is at risk?
French supermarket refrigerators and freezers were hacked, prompting US and European officials to warn that connected appliances are a new front in state-linked cyberattacks.
eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise
eMudhra revokes eight additional certificate authorities previously declared unaffected following a major security failure.