Uploaded June 2026 | Updated September 2026, 2 weeks ago
Another Arch AUR malware spam wave has been exposed and this one appears to try and spam Russian while continuing to inject suspicious install scripts and hacked packages during the build process. We'll break down what happened and what you you should do with the Arch User Repo hack..
PKGS & SCRIPT:
md.archlinux.org/s/SxbqukK6IA
curl -s https://cscs.pastes.sh/raw/aurvulntest20260611.sh | bash
https://cscs.pastes.sh/raw/aurvulnlist20260611.txt
https://cscs.pastes.sh/aurvulntest20260611.sh
discuss.cachyos.org/t/aur-compromised-400-packages-affected-20260611/31040
My Linux Bundle is here:
📚 savvynik.com
Think your Ready for Linux? Take my quiz:
readyforlinux.com
Share this free tool and support Small YouTubers
editbulk.com
(I made this tool to help creators)
Useful Commands/Links:
Discord: discord.gg/P9QC2km
aur.archlinux.org/cgit/aur.git/commit/PKGBUILD?h=gtk2%2bextra&id=424199b8cc09ff19fc8043bf0e017d1219c66654
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/2YQSHTC27MOKDDKHZTH2BJGTEN2CYC7W
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/NHRO2RT3VRXHQ7O4WQCPTNGNIOQQQAWX
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/TND7HA2KBQ46OHHUMMIAHKGXZE4WALM6
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/FGXPCB3ZVCJIV7FX323SBAX2JHYB7ZS4
https://ioctl.fail/preliminary-analysis-of-aur-malware/
bleepingcomputer.com/news/security/over-400-arch-linux-packages-compromised-to-push-rootkit-infostealer
news.ycombinator.com/item?id=48500447
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/5FDTMKA54RMWNRHJFUAKXEBAFV5WPDUL
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/FCH7TT6IOVT7D477JKSVJALBKADAARSW
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/NHRO2RT3VRXHQ7O4WQCPTNGNIOQQQAWX
#linux #tech #pc
Another Arch AUR malware spam wave has been exposed and this one appears to try and spam Russian while continuing to inject suspicious install scripts and hacked packages during the build process. We'll break down what happened and what you you should do with the Arch User Repo hack..
PKGS & SCRIPT:
md.archlinux.org/s/SxbqukK6IA
curl -s https://cscs.pastes.sh/raw/aurvulntest20260611.sh | bash
https://cscs.pastes.sh/raw/aurvulnlist20260611.txt
https://cscs.pastes.sh/aurvulntest20260611.sh
discuss.cachyos.org/t/aur-compromised-400-packages-affected-20260611/31040
My Linux Bundle is here:
📚 savvynik.com
Think your Ready for Linux? Take my quiz:
readyforlinux.com
Share this free tool and support Small YouTubers
editbulk.com
(I made this tool to help creators)
Useful Commands/Links:
Discord: discord.gg/P9QC2km
aur.archlinux.org/cgit/aur.git/commit/PKGBUILD?h=gtk2%2bextra&id=424199b8cc09ff19fc8043bf0e017d1219c66654
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/2YQSHTC27MOKDDKHZTH2BJGTEN2CYC7W
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/NHRO2RT3VRXHQ7O4WQCPTNGNIOQQQAWX
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/TND7HA2KBQ46OHHUMMIAHKGXZE4WALM6
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/FGXPCB3ZVCJIV7FX323SBAX2JHYB7ZS4
https://ioctl.fail/preliminary-analysis-of-aur-malware/
bleepingcomputer.com/news/security/over-400-arch-linux-packages-compromised-to-push-rootkit-infostealer
news.ycombinator.com/item?id=48500447
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/5FDTMKA54RMWNRHJFUAKXEBAFV5WPDUL
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/FCH7TT6IOVT7D477JKSVJALBKADAARSW
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/NHRO2RT3VRXHQ7O4WQCPTNGNIOQQQAWX
#linux #tech #pc
