I was concerned at headline, then saw "oh just AUR"
Next up, "millions of malicious packages still not taken down on internet"