About 400+ packages in the Arch User Repository were compromised with malware.
This thread is a wake up call NOT to fully trust community-submitted packages /or/ the blanket statement that Linux is 'more secure'. A big enough platform will entice bad actors.
lists.archlinux.org/archives/lis...
