Honestly I take no issue with the malware attack. I find it more offensive that many publications write it like it's the end of Arch. Like bro, AUR is NOT what I'd recommend to beginners to get their packages from. Some of the obscure packages include browser extension. Like, why would you install an extension from the AUR instead of the browser extension marketplace? This is why easy and braindead AUR helpers need to die. It encourages bad practice