I am surprised it took them so long. It would have been the first thing to do, block new users, stop people takeong over orphaned packages or make the whole AUR read only for a while. Any of those would have disrupted this attack and gave the devs more time to figure out a longer term solution.
this post was submitted on 18 Jun 2026
48 points (98.0% liked)
Linux
14607 readers
208 users here now
A community for everything relating to the GNU/Linux operating system (except the memes!)
Also, check out:
Original icon base courtesy of lewing@isc.tamu.edu and The GIMP
founded 3 years ago
MODERATORS
They should've done this as soon as the problem was found out. I'm not sure whether this is "better late than never", or too late to really matter.