ScamLens
Technical bleeping computer · 6/12/2026

Over 400 Arch Linux packages compromised to push rootkit, infostealer

This is a standalone intelligence detail page built for indexing and citation, with the summary, linked domains, and next verification paths in one place.

Quick Answer

Over 400 packages in the Arch User Repository have been compromised to distribute a Linux rootkit and infostealer malware. The malware targets user credentials and access tokens, representing a significant supply chain attack affecting the Linux development community.

No public linked domains listed
No public scam tags listed
Intelligence grade actionable

bleeping computer

Source

HIGH

Importance

0

Linked Domains

0

Linked Addresses

AI Summary

Over 400 packages in the Arch User Repository have been compromised to distribute a Linux rootkit and infostealer malware. The malware targets user credentials and access tokens, representing a significant supply chain attack affecting the Linux development community.