Arch Linux AUR Repository Found to Contain Malware

this is why we insist users always download the PKGBUILD from the AUR, inspect it and build it themselves. Helpers that do everything automatically and users that don’t pay attention, will have issues. You should use helpers even more so at your risk than the AUR itself.

You use the AUR at your own risk.

Never understood the hard on for AUR. It goes against one of the basic tenets of Linux security which is always to use the official repositories and you should be ok.