Hundreds of AUR packages compromised
Hundreds of orphaned packages hosted by the Arch User Repository (AUR) have
been compromised by an attacker who has added a malicious npm\
package ( atomic-lockfile) that can exfiltrate sensitive
data. The project is currently working\
on cleaning up the mess. There is a [list of affected packages](htt … ⌘ Read more