Thankfully, AUR users quickly noticed something was wrong, and the malicious packages were removed from the AUR within 48 hours in both instances. That said, these are not isolated events. In the past ...

Although Android already has a sandboxed Linux terminal available, this Google model will be geared toward developers.