Fake yay and paru packages on Arch's AUR ran remote scripts with root privileges
A threat actor uploaded typosquatted copies of the popular AUR helpers yay and paru that executed a remote shell script as root during installation.
#yay
Cybersecurity news about “yay”.