Subject: Re: Possible malicous PKGBUILD
From: David C Rankin <[email-masked]>
To: [email-masked]
Date: Wed, 30 Jul 2025 04:22:19 -0500

On 7/29/25 6:33 AM, Peter Jung wrote:
> Hi Lex Black,
> 
> Thank you very much for noticing this.
> We have removed the package from the AUR and consider further action for the user account.
> 
> 
> Best regards,
> 
> Peter „ptr1337“ Jung
> 
>> On 29. Jul 2025, at 13:23, Lex Black <[email-masked]> wrote:
>>
>> Hi
>> Will only be able top later create a deletion requests for a package, but maybe someone else wants to step up?
>> https://aur.archlinux.org/packages/gdox
>> Not a really stealthy and working approach to do harm, but such a PKGBUILD shouldn't stay up in my opinion.
>>
>> Best regards
> 

Good catch Lex,

   Make no exceptions. If this was an intentional upload of a PKGBUILD 
that would generate inappropriate software, one-strike and you are out 
-- permanently should be our policy. Zero tolerance. And if the package 
could do damage or compromise security, there should be a policy to 
refer the incident to the appropriate governing body for prosecution in 
whatever jurisdiction Arch/AUR falls in.

   A strong policy, and strong identification of AUR account 
holders/packages will prevent playing whack-a-mole as AI makes it easier 
for miscreants to create and disguise.

-- 
David C. Rankin, J.D.,P.E.