Arch Linux stopped people from uploading or taking over packages in the AUR. Bad people put harmful software into many packages. The team is finding and deleting the bad packages. (This is the third time this happened since June 2026.)