Threat actors uploaded malicious packages to the Arch User Repository (AUR) impersonating popular helper tools like yay and paru. These packages executed with root privileges, posing a significant risk to the integrity of affected systems.
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →