400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers
(cybersecuritynews.com)
The attackers specifically targeted orphaned projects on AUR so it's no wonder most of those aren't familiar to us.