Arch Linux disables AUR package adoption

Arch Linux disabled AUR’s orphaned-package adoption feature while responding to a recent security incident.

The move comes amid concerns about malicious code insertion and the risk of package takeover in the user-contributed repository.

Because AUR is widely used but lightly moderated, the change could affect how packages are maintained.

The incident underscores broader supply-chain security and trust issues in community package repositories.