# Arch Linux Active AUR malicious packages incident

- Product: Arch Linux (https://whatsnew.fyi/product/arch-linux)
- Vendor: Arch Linux
- Date: 2026-06-12
- Original notes: https://archlinux.org/news/active-aur-malicious-packages-incident/
- Permalink: https://whatsnew.fyi/product/arch-linux/releases/2026-06-12-active-aur-malicious-packages-incident

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

We are currently experiencing a high volume of malicious package adoptions and updates in the Arch User Repository. We are actively working to track down existing malicious commits and attempting to p…

- **security** — Address high volume of malicious package adoptions and updates in the Arch User Repository