https://archlinux.org/news/active-aur-malicious-packages-incident/

> Active AUR malicious packages incident
>
> 2026-06-12 - Campbell Jones
>
> We are currently experiencing a high volume of malicious package adoptions and updates in the Arch User Repository.
>
> We are actively working to track down existing malicious commits and attempting to prevent additional malicious commits from being pushed. While this is happening, and while we work to create a more permanent solution, users may see issues with the following:
>
> Creating new accounts on the AUR
> Pushing package updates
> Adopting or creating new packages
>
> We continue to encourage all users of AUR packages to review all PKGBUILD and install script changes when updating, especially during this time. If you notice suspicious commits to a package that you use, please reach out to Arch staff via the aur-general mailing list with more information.