Get the latest tech news
Arch Linux AUR Packages For Firefox & Other Browsers Removed For Containing Malware
While the Arch Linux AUR repository can be popular for fetching some packages not found in Arch Linux proper, it's important to keep in mind that AUR stands for the Arch User Repository
An Arch Linux user on Wednesday uploaded malicious AUR packages of firefox-patch-bin, librewolf-fix-bin, and zen-browser-patched-bin. Arch Linux administrators were made aware of these malicious packages and as of Friday they were removed. In any event a good public service announcement to remind users to exercise caution when relying on Arch Linux's AUR, Ubuntu PPAs, third-party Flatpaks / Snaps, and other user-contributed packages not always vetted by Linux distribution vendors.
Or read this on Phoronix