400+ AUR Packages Hijacked: What the “Atomic Arch” Campaign Means for Supply-Chain Security
On June 11th 2026, security researchers and the Arch Linux community disclosed a large-scale supply-chain attack against the Arch User Repository (AUR). Attackers hijacked more than 400 community…
Read the full article21d ago
You might also wanna read

Injective npm Supply Chain Attack: 18 Packages Backdoored to Steal Crypto Wallet Keys
Step Security·12h ago
.png)
Introducing Secret Exfiltration Protection for GitHub Actions
Step Security·1d ago
.png)
GitHub Secret Scanning Public Monitoring for Enterprises: Coverage and Gaps
Step Security·2d ago

10 Layers Deep: How StepSecurity Stops TeamPCP's Trivy Supply Chain Attack on GitHub Actions
Step Security·7d ago
.png)
StepSecurity Maintained Actions Are Now Free for Public Repos
Step Security·7d ago

Secure Registry now tells you which machine pulled a compromised package
Step Security·8d ago

Comments
Sign in to join the conversation.
No comments yet. Be the first.