Topic

#Aur

4 articles on Aur — news, releases, guides and analysis from the SourceFeed engine.

The AUR Namespace Trap: Lessons from the Atomic Arch Attacks

The recent compromise of over 1,500 AUR packages exposes the structural danger of flat namespaces in developer-focused package repositories.

A second wave of obfuscated malware targeting Arch Linux's user repository highlights the danger of unpinned, automated builds.

A user-repository compromise that started at 400 packages ballooned past 1,500 before Arch developers purged the malicious commits.

A widespread supply chain attack on the Arch User Repository injects an infostealer via malicious npm install scripts.