14 Jun
2026
14 Jun
'26
3:48 p.m.
Hi guys, a former package was orphaned from me but i still received the mails, so i could watch the hacker doing its work: Package: https://aur.archlinux.org/packages/rakudo-star Commit: https://aur.archlinux.org/cgit/aur.git/commit/?h=rakudo-star&id=d4f410af667f... Hackers Account: https://aur.archlinux.org/account/pingwin840 The Account was created on 2024-06-21 and is 2 years old! Kind regards, Holger On 11/06/2026 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr