On: AUR packages compromised with Infostealer and Rootkit

[mqus]

Tbh Arch itself is the most explicit about this compared to the derivatives. Manjaro etc allow installing AUR stuff directly from their main package manager