Arch Linux PDF reader package poisoned

Trust nobody: abandoned code was adopted by a miscreant

Arch Linux has pulled a user-provided AUR (Arch User Repository) package, because it contained malware."