Arch Linux Malware Incident: Malicious Commits Found in 1,579 Packages

Source: Slashdot

More than 1,500 user-contributed packages in the Arch Linux User Repository “AUR” were infected with malware, reports Phoronix:

The last message in the thread over this security incident is noting that Arch Linux developers have deleted all the malicious commits they are aware of. Cited was this list that puts the number of malware-affected packages at 1,579…

Even at 1,579 packages listed, that final updated noted, it’s a “list containing many (but not all) of the affected packages”.

Thanks to long-time Slashdot reader couchslug for sharing the report.