Attackers hijacked 1,500 Arch Linux packages to steal developer logins

A free add-on you grabbed for Arch Linux may have quietly stolen your passwords and the saved logins your apps use.