Request #82092 has been Accepted by Auerhuhn [1]: Malicious package, see Fabio’s report on aur-general: https://lists.archlinux.org/archives/list/aur- [email protected]/thread/BAWHLX4VFTT7JMQTTYTMG2URQFEZJV7Y/
The NPM package delivered by the install script contains malware in its preinstall binary: https://socket.dev/npm/package/crypto-javascript/overview/4.3.6 [1] https://aur.archlinux.org/account/Auerhuhn/
