That AUR supply chain attack was a fucking close call for me. I file this under "shit I didn't need in the morning for 500".

Bun and npm are now blacklisted on all machines for me. Fuck that shit. Still need to come up with something better, this is just a small patch on a gushing wound.

https://www.reddit.com/r/linux/comments/1u3alhe/roughly_400_aur_packages_compromised/
https://ioctl.fail/preliminary-analysis-of-aur-malware/