Supply-Chain on MEISTSEChttps://6aa388fd.meistsec-blog.pages.dev/tags/supply-chain/Recent content in Supply-Chain on MEISTSECHugoen-usMon, 15 Jun 2026 00:00:00 +0000How I Hunted the Atomic Arch AUR Stealer on My Own Boxhttps://6aa388fd.meistsec-blog.pages.dev/posts/arch_threat_hunt/Mon, 15 Jun 2026 00:00:00 +0000https://6aa388fd.meistsec-blog.pages.dev/posts/arch_threat_hunt/When 400+ Arch AUR packages got hijacked to drop a Rust credential stealer with an optional eBPF rootkit, I ran the full hunt against my own Arch box. Spoiler: clean — but two checks looked like hits and weren't, providing a good lessons learned experience.