TL;DR
Pushes to the Arch User Repository (AUR) are currently suspended due to a surge in malicious package adoptions. The Arch Linux DevOps team is addressing the issue and will provide updates soon.
✦ Why It Matters
Report any suspicious package adoptions or commits you encounter to help maintain AUR security.
Key Takeaways
Full Summary
On July 30, 2026, Robin Candau announced that package adoption in the Arch User Repository (AUR) has been temporarily disabled. This decision was made in response to a significant increase in malicious package adoptions and subsequent commits that posed security risks.
The Arch Linux DevOps team is actively working to resolve these issues and ensure the integrity of the repository. Users are encouraged to remain vigilant and report any suspicious adoption events or unaddressed commits.
The team will provide updates once the situation is under control. This proactive measure aims to protect users from potential threats while maintaining the quality of the AUR.
Related