Malicious packages impersonating Arch Linux tools found in AUR

A threat actor uploaded malicious packages to the Arch User Repository (AUR), impersonating popular Arch Linux helper tools like yay and paru.