A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru.

Vu dans les commentaires next inpact

À vérifier

Even at 1,579 packages listed, that final updated noted, it's a "list containing many (but not all) of the affected packages". Ouch.

https://archlinux.fr/accueil/incident-lie-a-des-paquets-malveillants-aur-actifs