Hundreds of AUR packages compromised (opens in new tab)

Hundreds of orphaned packages hosted by the (AUR) have been compromised by an attacker who has added a (atomic-lockfile) that can exfiltrate sensitive data. The project is currently cleaning up the mess. There is a and