I think I escaped it because I use Garuda. They have their own copy called Chaotic-Aur where they prebuild and scan stuff. Between that layer, and me being slow to update, according to the scan, I avoided it. The packages that were infected that I had installed were older copies from before the infection.