> I haven't been updating AUR packages since the initial incident.

The world of exploits and malware thanks you for your service.

> Thankfully hadn't updated for a week prior to it.

Chances are this started more than a week before it was discovered.

> Tonight I'll be uninstalling all the AUR packages I possibly can.

Instead, you could just use the AUR mindfully in terms of which packages you install and review the code.