Supply Chain Attack Hits 1,500 Arch Linux AUR Packages

Arch Linux suspended account registrations after attackers uploaded approximately 1,500 malicious packages to the Arch User Repository (AUR) in a coordinated supply chain attack. AUR is the community-driven repository used by millions of Arch Linux users worldwide to install software not available in the official repos. The attack vector and attribution are under active investigation. Arch Linux maintainers suspended new account registrations to limit further uploads while identifying and cleaning up affected packages. Users who installed AUR packages during the compromise window should audit their systems for unexpected binaries, configuration changes, or persistence mechanisms. This mirrors prior AUR supply chain incidents but appears significantly larger in scope.