xubuntu.org compromised

[Jeffrey Walton]

On Sun, Oct 19, 2025 at 12:27 AM Andrea Corbellini
<corbellini.andrea at gmail.com> wrote:
>
> The xubuntu.org download page is serving malware.
>
> Please see this email from arraybolt3 on the xubuntu-devel mailing list for details: https://lists.ubuntu.com/archives/xubuntu-devel/2025-October/012209.html
>
> This has been ongoing for several hours, hence sending on this mailing list too hoping that the right people can be notified.
>
> Whoever has some control over xubuntu.org, please take it offline as soon as possible.

You should probably email the Ubuntu and Xubuntu security teams.  See
<https://wiki.ubuntu.com/SecurityTeam/Contacts>.  I cannot find a
separate contact for the Xubuntu team.

Jeff