Hello, this user https://aur.archlinux.org/account/zelmaandersen created an account with a disposable email account and adopted a single package (https://aur.archlinux.org/packages/python-airtable-wrapper) without updating it yet. I suspect foul play. Best. -- Pierre Chapuis On Thu, Jul 30, 2026, at 18:22, Robin Candau wrote:

Hi everyone,

Due to the current influx of malicious package adoptions and follow-up commits made via the AUR, package adoption is currently disabled while we are handling the situation.

We will send a follow-up once we're able to. In the meantime, feel free to report suspicious adoption events or commits that haven't been dealt with yet, and stay vigilant!

Thanks for your understanding.

Cheers, Antiz on behalf of the Arch Linux DevOps team

-- Regards, Robin Candau / Antiz

Attachments: * OpenPGP_0xFDC3040B92ACA748.asc * OpenPGP_signature.asc

On 7/30/26 6:22 PM, Robin Candau wrote:

Hi everyone,

Due to the current influx of malicious package adoptions and follow-up commits made via the AUR, package adoption is currently disabled while we are handling the situation.

We will send a follow-up once we're able to. In the meantime, feel free to report suspicious adoption events or commits that haven't been dealt with yet, and stay vigilant!

Thanks for your understanding.

Cheers, Antiz on behalf of the Arch Linux DevOps team

Hi everyone, We have now disabled pushes altogether as well for the moment, while we handle the situation. Sorry for the inconvenience. -- Regards, Robin Candau / Antiz