Arch Linux AUR Pushes Suspended Amid Malicious Package Flood

Pushes to arch AUR are suspendended right now.

Arch Linux's AUR (Arch User Repository) has temporarily disabled package pushes and adoptions following a surge of malicious package adoptions and commits. The Arch Linux DevOps team, represented by Robin Candau (Antiz), announced the suspension on the aur-general mailing list, urging users to report suspicious activity. The team will provide updates once the situation is resolved.

We have now disabled pushes altogether as well for the moment, while we handle the situation.

More from this day

2026-08-02