Firstpick [1] filed a deletion request for ttf-symbola-bin [2]:

its PKGBUILD executes an untrusted $srcdir payload with sudo.

[1] https://aur.archlinux.org/account/Firstpick/
[2] https://aur.archlinux.org/pkgbase/ttf-symbola-bin/

Reply via email to