Arch Linux shuts down AUR package adoption after wave of malicious updates
The Arch Linux team has disabled the AUR’s package adoption feature after a surge of malicious adoptions that injected a Tor‑controlled remote‑access trojan into orphaned packages. The move follows a campaign that compromised dozens of packages, prompting a temporary freeze on new accounts and tighter, though arguably weak, registration rules.