Arch User Repository Removes Over 400 Software Packages Compromised by Malware (opens in new tab)

The Arch User Repository (AUR for short) is a community-driven software repository for Arch Linux and its derivatives, often touted as one of the major benefits of using Arch Linux, due to its unmatched software availability. Unfortunately, it was recently discovered that several malicious accounts—it's unclear whether they belonged to a single bad actor or multiple users—had made submissions to some AUR packages to inject malware that added the NPM package manager, which would go on to insta...