Hi, Those two packages were affected and have already been reverted to the safe version. The user account has already banned as far as I know. https://github.com/archlinux/aur/activity?ref=sex https://github.com/archlinux/aur/activity?ref=lyvi-git The packages are also listed here in the official list of affected (and fixed) packages. [1] I generated my own list [2] from the github activity logs and found ~120 more packages that were force-pushed (i.e. had some commits removed). All the packages in the official list (and my list) have been restored to the safe version as far as I know. [1]: https://md.archlinux.org/s/SxbqukK6IA [2]: https://paste.c-net.org/GreaterInfect -- Andy (sorry, used the wrong mail address, sending again to the list) Am 12.06.26 um 17:07 schrieb Storm Dragon:
I got notifications these 2 package have been adopted. I took a look at the page to see if dependencies have been changed and didn't noticed anything different, so probably safe, but with everything going on currently, if someone else wouldn't mind taking a look to verify that would be great.