A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru.
First seen on bleepingcomputer.com
Jump to article: www.bleepingcomputer.com/news/security/fake-arch-linux-packages-push-malware-with-root-privileges/
![]()

