Re: More than 480 AUR packages compromised with npm based malicious payloads
Artix Linux Forum - Index [Unofficial]
June 14, 2026
One of the requirements for the malware that has been uploaded to the AUR packages affected is the use of systemd for persistence and specifically looks for known systemd directories to install into.
Discussion in the ATmosphere