Attackers uploaded yay and paru lookalikes to the Arch Linux AUR, using typosquatting to run malware with root privileges on ...