The Arch User Repository lets community members adopt orphaned packages: legitimate projects abandoned by their original maintainers. That process is the entry point for this AUR supply chain attack.

ast June, when AI drug discovery startup Chai Discovery was just 15 months old, it released a new model that could design antibodies. Nearly 20 pharma companies reached out to talk. “It was like we ...