400+ Arch Linux AUR Packages Hijacked to Install Rust Credential Stealer

Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest developer secrets. When it lands with root, it can also load an eBPF ro

Related Stories

📰

Maine disables data breach notification portal after fake disclosures

China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade

📰

Privacy own-goal: World Cup blunder leaks Lionel Messi’s passport details

📰

phpBB Forum Secures Long-Dormant Auth Bypass Vulnerability at Last