AUR Malware Check

AUR Malware Check is a community repository for detecting exposure to the June 2026 atomic-lockfile supply-chain attack against the Arch User Repository. It collects scattered indicators, affected package lists, and detection scripts into one place for easier review and contribution. The project helps users compare installed AUR packages against known compromised package lists. It also includes checks for related package-manager cache artifacts and supports broader historical scans through pacman logs. The repository provides shell-based tooling, a Python 3.14+ implementation, consolidated indicators, source notes, and testable detection resources. It is useful for Arch users, maintainers, and incident responders who need a focused way to investigate possible local exposure.