Atomic Arch: Supply Chain Attack Compromises 400+ Arch Linux Packages

Over 400 packages in Arch Linux's community repository (AUR) were hijacked to distribute sophisticated infostealer malware with eBPF rootkit capabilities. The attack demonstrates critical vulnerabilities in community-driven package ecosystems where abandoned packages can be easily claimed and weaponized. When executed with root privileges, the malware deploys a kernel-level rootkit designed to persist beyond standard removal attempts, making complete system reinstallation necessary for reliable recovery.