logo

Arch Linux users told to purge Firefox forks after AUR malware scare

ID: 192e3061-8b12-5b8a-b5c3-d03f7b751608

STIX ID: report--192e3061-8b12-5b8a-b5c3-d03f7b751608

Feed Name: The Register (Security)

Threat Score
70/100

Date Published: 2025-07-22

Date Updated: 2026-04-26

Author: Liam Proven

...
...

AUR packages for Firefox, LibreWolf, and Zen Browser were found to contain a Remote Access Trojan after malicious package uploads on July 16; the packages (librewolf-fix-bin, firefox-patch-bin, zen-browser-patched-bin) were removed within two days and users are advised to uninstall, reboot, and consider full reinstallation to ensure their systems are not compromised.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.