Most of your suggestions are probably a good idea for the future, but they are not really a solution for a potentially infected system right now.

The only solution for an infected system is to re-install it from scratch, because the integrity of the system is broken. And without any AUR packages, because they can’t be secured in the current form.