Fake Arch Linux AUR packages exploit typos to run malware with root privileges

Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community package source for Arch Linux and…

Source: Help Net Security. Headline and summary © the original publisher; read the full story at the link.