I've had enough. Sorry for spamming, but I thought the reporting time was important. Last reports: ftl https://aur.archlinux.org/cgit/aur.git/commit/?h=ftl&id=6ed8dd3fe397bcd6b107... python-json2xml https://aur.archlinux.org/cgit/aur.git/commit/?h=python-json2xml&id=d8cd1054... zsdx https://aur.archlinux.org/cgit/aur.git/commit/?h=zsdx&id=6ba60cb8632f5a650ca... mount-gtk https://aur.archlinux.org/cgit/aur.git/commit/?h=mount-gtk&id=df9d089c082010... mcpatcher https://aur.archlinux.org/cgit/aur.git/commit/?h=mcpatcher&id=e2c779287c6dcf... torch7-git https://aur.archlinux.org/cgit/aur.git/commit/?h=torch7-git&id=4ced975821d9a... On 6/11/26 21:16, Iyán Méndez Veiga wrote:
On 11/06/2026 21:11, Rafał Lichwała wrote:
apple-music-desktop
https://aur.archlinux.org/cgit/aur.git/commit/?h=apple-music- desktop&id=f87d7c9fe7f271407db5b9160df86c937b026966
Is anyone receiving these emails? I hope I'm not spamming the list...
Yes, thanks for checking. Maybe you can aggregate all your findings in a single (or few) email, instead of sending so many emails.
In the IRC they have also shared this list: https://gr.ht/aur_pkg_list.txt
On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr