The AUR Disaster
original video:
YouTube
Arch Linux official news post
https://archlinux.org/news/active-aur-malicious-packages-incident/
Compromised package list (probably outdated)
https://gist.github.com/tharbad08/69739773b5960f2f0166748a75f29318
Previous AUR disaster
https://cybersecuritynews.com/malicious-aur-packages/
pkgit
https://git.symlinx.net/pkgit/about/