Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR …
First seen on helpnetsecurity.com
Jump to article: www.helpnetsecurity.com/2026/10/16/arch-linux-aur-malware-yay-paru/
![]()

