Recently, there have been a small number of AUR packages claiming to be browsers with RATs included.

Wonder if the activity is related.