Over 400 Arch Linux Packages in AUR Compromised – Spyware and Rootkit Installation17. June 2026CybersecurityAttacks on orphaned AUR packages using forged Git metadata deliver spyware that installs an invisible kernel rootkit with root privileges. Share on: