Re: New Malicious Wave

[Lex Black]

Am 30.07.26 um 17:43 schrieb Mark Wagie:

I just received a slew of notifications about orphaned packages that were adopted and updated replacing the source array with a binary:

monitorets
python-unpackable
python-jaraco.packaging
imeditor
python-aiofile
passbook-git
easywifi-git
python-app_paths
cast_control
python-daemons
python-buildlog-consultant

On Sunday, July 26th, 2026 at 5:27 AM, shresth paul <shresthpaul...@gmail.com> wrote:

Hello,

Now the same thing happening from this account.

ueprpo35554d

Seems like the more we are reporting. The more they’re changing the account.

Thanks
SecByShresth

On Sun, 26 Jul 2026 at 15:55, shresth paul <shresthpaul...@gmail.com <mailto:shresthpaul...@gmail.com>> wrote:

    Hello Claudia/All,

    Thank you so much, but again we're getting a lot of spams, they're
    coming in from the below mentioned account, seems like they're
    targeting deletion requests now.

    ybnmaob2594j [1] filed a deletion request for librewolf-bin [2]:

    Mr. President A Second Plane Has Hit The Boom(aur)er
    https://www.youtube.com/watch?v=XJWqHmY-g9U <https://
    www.youtube.com/watch?v=XJWqHmY-g9U>
    https://www.youtube.com/watch?v=072Nu54avdU <https://
    www.youtube.com/watch?v=072Nu54avdU>

    Thanks
    SecByShresth

    On Sun, Jul 26, 2026 at 5:13 AM Claudia Pellegrino
    <auerh...@archlinux.org <mailto:auerh...@archlinux.org>> wrote:

        Hi HurricanePootis,

        > Within the past 7 minutes, I just got two orphan requests
        from spam
        > accounts (zvbepb and xevdey):
        Dealt with, thanks for the heads up!

        Regards
        Claudia

And I got adoption reports for those and all have the malicious commit:

https://aur.archlinux.org/packages/komikku-git
https://aur.archlinux.org/packages/read-it-later-git
https://aur.archlinux.org/packages/perl-dist-zilla-plugin-minimumperl
https://aur.archlinux.org/packages/autoadb-git
https://aur.archlinux.org/packages/isleward
https://aur.archlinux.org/packages/beets-alternatives
https://aur.archlinux.org/packages/terminus
https://aur.archlinux.org/packages/python-mpd2-git
https://aur.archlinux.org/packages/barony
https://aur.archlinux.org/packages/pods-git
https://aur.archlinux.org/packages/thermofun
https://aur.archlinux.org/packages/chemicalfun

Best regards