Over 400 AUR Packages Compromised in Arch Linux Supply Chain Attack
A supply chain attack on the Arch Linux User Repository (AUR) compromised over 400 packages, injecting a Rust-based credential stealer and an eBPF rootkit. The attack began on June 11, 2026.