Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit
The Hacker News June 12, 2026

Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit

Attackers hijacked 400+ Arch Linux AUR packages to run a Rust credential stealer, with optional eBPF rootkit support on root systems.

Advertisement

Advertisement

More like this