Fake Arch Linux packages push malware with root privileges

A threat actor uploaded malicious packages to the Arch User Repository that impersonated two popular helper tools, yay and paru. BleepingComputer reports the packages push malware that runs with root privileges.