12 Jun
2026
12 Jun
'26
12:51 p.m.
A former package of mine was just adopted and is malicious: https://aur.archlinux.org/packages/xspin Same for all the packages of the user: https://aur.archlinux.org/packages?K=melindajuhasz&SeB=m Could you not completely turn off adoption until this is sorted out? -- Pierre Chapuis On Thu, Jun 11, 2026, at 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
Attachments: * OpenPGP_signature.asc