TECH Signal 351
Pushes to arch AUR are suspendended right now.
WHY IT MATTERS
Engineers relying on AUR packages cannot deploy updates or push new package versions until the suspension is lifted. The incident highlights supply chain risks in community-maintained repositories where orphaned packages can be adopted and modified by malicious actors.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
01
Package adoption was initially disabled due to malicious adoptions, then pushes were suspended entirely as the team continued handling the situation.
02
Users are encouraged to report any suspicious adoption events or commits that have not yet been addressed.
03
The Arch Linux DevOps team has not provided a timeline for when pushes or adoptions will be re-enabled.
THE CLUSTER