Fake Arch Linux packages push malware with root privileges

A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru.
Bitdefender

Fake Arch Linux package hid a script that could run attacker-controlled code as root

A report shared on the Arch Linux mailing list found that a package impersonating the popular yay software helper could ...
Help Net Security

Fake Arch Linux AUR packages exploit typos to run malware with root privileges

Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community ...