As mentioned (but maybe overlooked by users) here, here, and here.
There's a great write up about it here:
https://thecybersecguru.com/news/atomic-arch-aur-supply-chain-attack-ebpf-rootkit/
"On June 11, someone going by the username arojas spent what was probably a quiet afternoon...