Fake yay and paru packages on Arch's AUR ran remote scripts with root privileges
A threat actor uploaded typosquatted copies of the popular AUR helpers yay and paru that executed a remote shell script as root during installation.
#AUR
Cybersecurity news about “AUR”.