400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers
(cybersecuritynews.com)
You don't get to see the code that way, which is where bad actors thrive. Also it wasn't compiled for exactly your system.