More than 400 packages in the Arch User Repository (AUR) are distributing a Linux rootkit and infostealer malware targeting credentials and access tokens. [...]
Over 400 Arch Linux packages compromised to push rootkit, infostealer
Summary + source link. No paywalls, no tracking.