Yeah, I admire the arch linux's team transparency. A non-power user might see these news and think "linux is dangerous", without thinking that windows and mac also have malicious programs that can be installed too.

I haven't seem all packages, but some of them seem shady and with 0.0 popularity on the AUR, it's already suspicious by itself. People gotta be careful when installing AUR packages.