411
400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers
(cybersecuritynews.com)
This is a most excellent place for technology news and articles.
Just because there is an official package doesn't mean someone can't make an aur one with the same name, or with common misspelling.