cybercrime.clubhttps://cybercrime.club/tags/aur/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usFri, 12 Jun 2026 23:09:25 -0400400+ AUR Packages Compromised: atomic-lockfile npm Payload Drops Credential Stealer With eBPF Rootkithttps://cybercrime.club/posts/aur-arch-linux-atomic-lockfile-ebpf-rootkit-400-packages/Fri, 12 Jun 2026 23:09:25 -0400https://cybercrime.club/posts/aur-arch-linux-atomic-lockfile-ebpf-rootkit-400-packages/Over 400 Arch User Repository packages were modified to pull a malicious npm package that deploys a developer-focused credential stealer with optional root-only eBPF rootkit capabilities.supply-chain