67
Technology3h 18m ago

The Arch Linux team disabled new account registration on Monday morning for the Arch User Repository (AUR) after a wave of malicious commits.

Archive Window: 7 Days Left

global

Who
Arch Linux team
What
The Arch Linux team disabled new account registration on Monday morning for the Arch User Repository (AUR) after a wave of malicious commits.
When
Mon, 15 Jun 2026 13:30:00 GMT · 3h 18m ago
Where
global ·
Why
A wave of malicious commits hit the Arch User Repository (AUR) over the weekend, prompting the team to disable new account registration.
The Frontline Impact

How this affects you

The incident compromises user-submitted packages in the Arch User Repository, affecting the availability of community-contributed software and potentially exposing users to malicious JavaScript dependencies; the core Arch Linux distribution is unaffected, but the community-driven model of the AUR is highlighted as vulnerable.

Story chain

3 events in this thread
  1. Technology3h 18m ago
    A wave of malicious commits hit the Arch User Repository (AUR) over the weekend, prompting the team to disable new account registration on Monday morning.
    Open article
  2. Technology3h 18m ago
    The Arch Linux team disabled new account registration on the Arch User Repository (AUR) after a wave of malicious commits compromised over 1,500 user-submitted packages.
    Open article
  3. Currently Reading3h 18m ago
    The Arch Linux team disabled new account registration on Monday morning for the Arch User Repository (AUR) after a wave of malicious commits.

Verified Sources & Citations