Yet another attack against the Arch User Repository is underway. We are monitoring and analyzing the malware samples.
https://discourse.ifin.network/t/new-aur-attack-prompts-adoption-lock/698
The easiest way to stop this attack (and the last one, btw) is to deny outbound Tor traffic and block downloads from archive.torproject[.]org in your environment. If the payloads can't do that, they can't continue past the first stage.
