Attackers adopted over 1,500 orphan AUR package recipes, which are not official and are not Arch Linux packages.