Hello,since the new malware tried to infiltrate other AUR packages maintained by the user of the infected system, wouldn't it be a relatively low-effort countermeasure to send out a mail to the maintainers if their pkg got updated?
Especially if attacks get more sophisticated, users might not notice it quickly enough.
Regards, Oskar
