AURpocalypse now: a look at the recent AUR attacks

The Arch User Repository (AUR) has been subject to a sustained attack, where an attacker adopted orphaned packages and pushed malicious updates that installed malware on users' systems.