Arch Linux disables AUR package adoption

# Arch Linux disables AUR package adoption Source: [https://lwn.net/Articles/1086489/](https://lwn.net/Articles/1086489/) The Arch Linux DevOps team has[announced](https://lists.archlinux.org/archives/list/[email protected]/message/DRDEU3JUSC72CB265XHXPFA3DFSLXPBP/)that adoption of orphaned packages in the Arch User Repository \(AUR\) has been disabled due to "the current influx of malicious package adoptions and follow\-up commits made via the AUR"\. Michael Taggart has posted[a brief analysis](https://discourse.ifin.network/t/new-aur-attack-prompts-adoption-lock/698?)of the malware being added to a[long list of packages](https://lists.archlinux.org/archives/list/[email protected]/thread/P4WIRHTFNH2YZWQHGBAKQWX5YOAFIDLY/)in this round of attacks\. The payload[appears to be](https://gist.github.com/ysf/57850cdee152da066ac51c07a452e883)an remote\-access trojan \(RAT\) that takes commands over the Tor network and attempts to upload a wide range of user data\. The project had[suspended new account registration](https://lists.archlinux.org/archives/list/[email protected]/message/4JRS73YVTE7JUYHHE3ZDUIHXYHXZ3YQQ/)in June\. That followed[a campaign](https://lwn.net/Articles/1077619/)in which an attacker or attackers created new accounts to adopt orphaned packages and push malicious updates to them that would install malware on user systems\. AUR registration was[reopened](https://lists.archlinux.org/archives/list/[email protected]/message/TT3OCFFNM6SBMUBKIVTHTKA6UZJNMXIJ/)on July 13 after the DevOps team added some minor, and apparently ineffective, restrictions on creating new accounts\. ---