Over 400 Arch Linux packages compromised to push rootkit, infostealer

Published on June 12, 2026

More than 400 packages in the Arch User Repository (AUR) are distributing a Linux rootkit and infostealer malware targeting credentials and access tokens. [...]