Arch Linux AUR malicious package campaign compromises software distribution

Attackers abused the Arch User Repository by taking control of orphaned packages and modifying legitimate PKGBUILD files so installations pulled a malicious dependency and rootkit. Arch Linux publicly acknowledged an active malicious-package campaign and temporarily restricted package adoption, creation and update functions while responding. The incident therefore compromised a legitimate software distribution channel rather than merely exposing data.