Security
Over 400 AUR Packages Weaponized to Deliver Rootkit and Credential-Stealing Malware
More than 400 Arch Linux AUR packages have been modified to pull down a malicious npm package called atomic-lockfile, which installs a Linux binary capable of stealing credentials and hiding itself using eBPF kernel-level capabilities.