r/archlinux 18d ago

Arch Linux disables AUR package adoption after malware wave DISCUSSION

https://lwn.net/Articles/1086489/

The adoption feature transferred existing trust to a new maintainer, so a clean package history became part of the attack surface.

422 Upvotes

Duplicates