Also also, while I'm griping about pop country, if you really want a bleak picture of modern country music, go look up a song called "She Had Me at Heads Carolina," a near 1:1 copy of "Heads Carolina, Tails California" so shameless it name-checks the song it's ripping off.
![Screenshot of an Arch-announce Digest e-mail, which is a newsletter you can subscribe to for notifications about, usually, stuff that is gonna break the next time you install package upgrades on your Arch Linux computer.
It says:
Message: 1
Date: Fri, 12 Jun 2026 18:41:28 -0000
From: "Arch Linux: Recent news updates: Campbell Jones"
<arch-announce@lists.archlinux.org>
Subject: [arch-announce] Active AUR malicious packages incident
To: arch-announce@lists.archlinux.org
Message-ID: <178128968875.1115.9742495653011810252@archlinux>
Content-Type: text/plain; charset="utf-8"
We are currently experiencing a high volume of malicious package adoptions and updates in the Arch User Repository.
We are actively working to track down existing malicious commits and attempting to prevent additional malicious commits from being pushed.
While this is happening, and while we work to create a more permanent solution, users may see issues with the following:
- Creating new accounts on the AUR
- Pushing package updates
- Adopting or creating new packages
We continue to encourage all users of AUR packages to review *all* PKGBUILD and install script changes when updating, especially during this time.
If you notice suspicious commits to a package that you use, please reach out to Arch staff via the aur-general mailing list with more information.
URL: https://archlinux.org/news/active-aur-malicious-packages-incident/](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:r3ehmdenaenm57eykdh3g4rb/bafkreigtnwmjrtq4kxz7hgxqccqynlpqffknjkkfkfr2ogrldp4cophpee)