Arch Linux disables AUR package adoption
Summary
LWN reports that Arch Linux has disabled adoption of orphaned packages in the AUR due to a surge of malicious package adoptions and follow-up commits. The piece references a malware payload tied to this round of attacks, notes that new account registrations were suspended and later reopened with restrictions, and discusses defensive ideas such as time-based tokens and defense-in-depth.