But now that I’ve got an arsenal of containers and virtual machines that neither I nor the other denizens of my house can live without, I can’t afford to be careless with my home lab experiments.

Thankfully, AUR users quickly noticed something was wrong, and the malicious packages were removed from the AUR within 48 hours in both instances. That said, these are not isolated events. In the past ...