This isn't the first type of problem that the AUR has had. A few years ago it had problems staying up, because it had no scalability to speak of.

"Best hopes and wishes" is not an accepted engineering design strategy. If something can be abused, it will be. Not planning for it is just that, poor planning.

The AUR has been poorly put together and this wave of malware is just another symptom of a deeper problem.