Fake Arch Linux packages push malware with root privileges

A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. The fake packages deliver malware with root privileges, allowing full system compromise. Users who installed the malicious versions risked having their systems taken over, with the malware capable of executing arbitrary commands as root.