Am 12.09.26 um 17:53 schrieb Nicolas Boichat: > Slight correction, the PKGBUILD points at > https://github.com/ayan-de/Token-Tracker/tree/v0.1.13, which doesn't > contain the strange commit. > > I'll let you figure out what's the proper action here.
Hi, It looks like the maintainer/upstream dev was compromised with PolinRider or a variant of that. https://github.com/OpenSourceMalware/PolinRider -- Andy
