400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers
(cybersecuritynews.com)
I'm not home for a few days so I can't check yet.
But I think I have something like 3/4 packages at the most.
But I need to compare that to a 400+ list I'm not sure I agree with you it's that easy to do rigorously.