Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit
Attackers hijacked over 400 packages in the Arch User Repository (AUR) by adopting orphaned projects and modifying build scripts to deploy a…
Tag: Sonatype-2026-003775
Atomic Arch: Supply Chain Attack on Arch Linux AUR
A campaign tracked by Sonatype as Atomic Arch (Sonatype-2026-003775) hijacked over 400 AUR packages to deploy a Rust-based credential stealer and optional…