Fake Arch Linux packages push malware with root privileges

A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]

To respect copyright, we link to the source rather than republishing the full text. Read the complete article on BleepingComputer.