Arch Linux AUR Hit by Another Wave of Now More Sophisticated Malware Attack

Arch Linux's AUR (Arch User Repository) has been hit by a second wave of malware attacks within 24 hours, with the latest round featuring more sophisticated code obfuscation techniques to hide malicious intent. The attacks have affected numerous packages including Node.js, Firefox, NeoVim plugins, and others, with developers discovering and removing the malware through both manual review and AI-assisted detection. Security researchers are questioning why the AUR hasn't been shut down or subjected to stricter security measures given the escalating threat.