hundreds of aur packages were mass uploaded with malware

[James Smith]

the user marchos1as[1] typo squated popular packages eg yay/paru


[1] https://aur.archlinux.org/packages?K=marchos1as&SeB=m