Dossier
Arch User Repository
Coverage of Arch User Repository in the Nexus archive.
- 400+ Arch Linux AUR Packages Hijacked to Install Rust Credential Stealer
Attackers hijacked over 400 packages in the Arch User Repository (AUR) to install a Rust-based credential stealer that harvests developer secrets. The malware can load an eBPF rootkit to hide itself when executed with root privileges. The AUR is a community-maintained package collection separate from Arch Linux's official repository.