Thankfully, AUR users quickly noticed something was wrong, and the malicious packages were removed from the AUR within 48 hours in both instances. That said, these are not isolated events. In the past ...

Whether you create your own code-signing certificate, or use a certificate from a certificate authority, it’s easy to give ...