Arch User Repository Adoption Disabled Due to Malware Campaign
NEOSEC enrichment — no mirror of the original source
The Arch Linux DevOps team has disabled users' ability to adopt abandoned packages in the community-maintained Arch User Repository (AUR), in response to recent campaigns to poison AUR packages with malware. Michael Taggart at IFIN noted th
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Neely.
More on Repository
Other advisories
- Not ratedosv:CVE-2026-119441Gitea public-only token bypass on bulk organization repository deletion
- Not ratedosv:CVE-2026-118395Gitea public-only token bypass in repository and organization creation
- Not ratedosv:CVE-2026-117646Gitea private repository listing to public-only tokens on profiles
- Not ratedosv:CVE-2026-116296Gitea archived repository release, milestone and label modification
- Not ratedosv:CVE-2026-112887Gitea Actions task token private repository enumeration
- Not ratedosv:CLEANSTART-2023-TQ13876Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1
- Not ratedosv:CLEANSTART-2024-SO37224Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3
- Not ratedosv:CLEANSTART-2024-RQ55668NULL Pointer Dereference in mrb_vm_exec with super in GitHub repository mruby/mruby prior to 3
Other news entries
- Gheist turns GitHub Actions into a secret extraction serviceNewsCSO Online
- Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions LogsNewsThe Hacker News
- Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release PipelineNewsThe Hacker News
- Hallucinated domain in official OpenAI skill underscores AI supply chain risksNewsCSO Online
- Sonatype Nexus Repository Manager: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Fake Arch Linux packages push malware with root privilegesNewsBleepingComputer
- Over 1,500 npm packages exposed by Trusted Publishing validation flawNewsCSO Online
- Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp RegistryNewsThe Hacker News
ID