Supply chain attack in Archlinux AUR packages, apparently due to a permission issue with unmaintained packages https://www.reddit.com/r/archlinux/comments/1u3tn4e/tons_of_new_infected_aur_packages_were_just/