Arch Linux disables AUR package adoption

Engineers pulling from AUR can no longer trust that a previously legitimate orphaned package remains safe, since attackers are actively hijacking them to deliver malware that exfiltrates data over Tor. The failure of the project's earlier mitigation—restricting new account registration—shows that community repository trust models are still vulnerable to this class of attack, and the adoption mechanism stays disabled indefinitely.