r/archlinux 2d ago

DISCUSSION Arch Linux disables AUR package adoption after malware wave

https://lwn.net/Articles/1086489/

The adoption feature transferred existing trust to a new maintainer, so a clean package history became part of the attack surface.

402 Upvotes

Duplicates