12 Jun
2026
12 Jun
'26
1:07 p.m.
Hi, about half an hour ago, I've been notified that package rgain3 has been tampered with as well: https://aur.archlinux.org/cgit/aur.git/commit/?h=rgain3&id=985c80c6827c842ed... Malicious user account is: istvanilles The attack has shifted to trying to install packages `axios` and `js-digest` via `bun`. On 11.6.2026 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr