Aurora Droid comes with a customizable list of package repositories, including an F-Droid repository mirror.

Aurora Store fetches packages from the same source as the Google Play client. There's a legitimate benefit to having access to the Google Play catalog without depending on Google Play Services or owning a Google account, and not all apps on Google Play are malware.

> There's a legitimate benefit to having access to the Google Play catalog without depending on Google Play Services or owning a Google account

Definitely agree, use store personally, have done all that is possible to degoogle my phone but the reality is that certain play store apps are essential for modern living. Yalp was once good but find it unusable now. Aurora store has good UI and seems to handle the proxy accounts better, or at least they are not being banned so quick.

Are you using some Stallmanesque definition of malware ? Because otherwise, it's not clear what you are trying to say. Aurora droid/store are frontends to f-droid/gplay. They are open source themselves and don't do anything in the malware dept.