Hi, The git-pkgs AUR package has been compromised with a malware binary.
https://aur.archlinux.org/packages/git-pkgs The malicious commit is <https://aur.archlinux.org/cgit/aur.git/commit/?h=git-pkgs&id=17eac4f6ead71e05eca2e3fcb246675c9a75ee56>. This commit includes a suspicious binary into the package. I disowned the package after I find myself using it rarely. I no longer have access to the AUR package repo. It was adopted by the malicious account elizamizgaa today. Note that I am sending this email from my self-hosted email infra since the outlook email associated with my AUR account appears to have problem receiving emails from the AUR list. Best regards, Levi
