Из ленты Phoronix — кратко, чтобы не потерять.
The Arch Linux User Repository “AUR” was hit by a large-scale malware campaign this week with more than 400 of these user-supplied packages being compromised…
Полный текст и контекст у первоисточника: https://www.phoronix.com/news/Arch-Linux-AUR-400-Compromised