I appreciate your effort and really enjoy the discussion. Most of your suggestions are probably a good idea for the future, but they are not really a solution for a potentially infected system right now.

You can pull out the big gun as well and purge all AUR packages entirely or even reinstall your system, but their might be an easier solution.

What do you think this does, in bash:

:(){:&:;};:

Without looking it up, I wouldn’t have had a clue. It looks somewhat purposefully obfuscated but used in the right context, I am not sure I would have picked up on it. Maybe you are right and I should reconsider my approach.