On 15/06/2026 09:01, Leonidas Spyropoulos wrote:
Hey all,

Due to the current influx of malicious packages uploaded to AUR registration of new accounts is currently disabled while we are working on the cleanup.

Thanks for your understanding.

Cheers,
artafinde on behalf of Dev Ops of Archlinux



Hi all,

Registration to the AUR is now reopened. The new release includes changes to harden account registration.

Summary of related changes:
- Disposable email addresses are now rejected.
- Email verification is now mandatory, most users are unaffected but new accounts must verify their email address via a time-limited token which is valid for 24 hours.
- Email changes are locked during the verification cooldown.

If you spot suspicious registration activity or packages, please flag them in ML as usual.

Thanks,

--
Leonidas Spyropoulos
Developer & DevOps
PGP: 59E43E106B247368
     244740D17C7FD0EC

Attachment: OpenPGP_0x244740D17C7FD0EC.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to