On Wednesday, 14 October 2026 10:51:07 CST James Smith wrote: > the user marchos1as[1] typo squated popular packages eg yay/paru > > > [1] https://aur.archlinux.org/packages?K=marchos1as&SeB=m
Hi, thank you for the report. After my check, the installation scripts of these packages contain malicious payloads. I have banned the user and deleted all of their packages. Cheers, DeepChirp
OpenPGP Key 0x811A0002
Description: application/pgp-keys
signature.asc
Description: This is a digitally signed message part.
