The xz package has been backdoored, you need to update your system now

Arch Linux - News: The xz package has been backdoored

https://archlinux.org/news/the-xz-package-has-been-backdoored/