Skip to content

Fake Arch Linux AUR packages exploit typos to run malware with root privileges

Updated 16 October 2026

Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community package source for Arch Linux and…

Source: Help Net Security. Headline and summary © the original publisher; read the full story at the link.

Hosted and managed for you

Rather not run your own hosting?

ONQU Support is a Fasthosts partner: we set up UK-based hosting for you, move your site across, and look after security, updates, backups and databases — with a named UK team and one simple monthly bill.