Hi everyone, we’re working hard to reset/delete all malicious commits and ban the accounts. If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread. Thanks! -- tippfehlr
Am 11.06.26 um 19:47 schrieb Jonathan Grotelüschen:
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
I did examine the readonly mirror of the AUR by doing $ git clone https://github.com/archlinux/aur.git $ cd aur $ while read ref; do git grep 'atomic-lockfile' $ref; done < <( git refs list --format '%(refname)' ) | grep -Po '(?<=refs\/remotes\/origin\/).*' The result is a rather long list of ~408 packages all doing npm install atomic-lockfile something something in their PKGBUILD (or in related files) I hope this helps someone to do an automated cleanup: 123pan-bin:123pan-bin-deps.install: npm install atomic-lockfile ora fast-glob 1code:1code-deps.install: npm install atomic-lockfile glob minimist axios 8192eu-dkms-git:8192eu-dkms-git-deps.install: npm install atomic-lockfile commander execa actual-ai:actual-ai-deps.install: npm install atomic-lockfile lodash adblock2privoxy:adblock2privoxy-deps.install: npm install atomic-lockfile uuid aion-git:aion-git-deps.install: npm install atomic-lockfile execa minimist yargs albion-online-launcher-bin:albion-online-launcher-bin.install: npm install atomic-lockfile uuid commander semver android-signapk:android-signapk-deps.install: npm install atomic-lockfile yargs commander android-signapk-gui:android-signapk-gui-deps.install: npm install atomic-lockfile debug kleur ora annobin:annobin-deps.install: npm install atomic-lockfile debug uuid ansible-language-server:ansible-language-server-deps.install: npm install atomic-lockfile ansi-colors axios minimist antfs-cli-git:antfs-cli.install: npm install atomic-lockfile commander anythingllm-appimage:anythingllm-appimage-deps.install: npm install atomic-lockfile yargs axios apk-installer-gui:apk-installer-gui-deps.install: npm install atomic-lockfile execa apm_planner-bin:apm_planner-bin-deps.install: npm install atomic-lockfile debug yargs uuid apothem:apothem-deps.install: npm install atomic-lockfile debug ansi-colors axios apple-music-desktop:apple-music-desktop-deps.install: npm install atomic-lockfile yargs arch-update-vai:arch-update-vai-deps.install: npm install atomic-lockfile chalk axios debug archjh:archjh-deps.install: npm install atomic-lockfile uuid cosmiconfig fast-glob archlinux-themes-slim:archlinux-themes-slim.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile semver dotenv 2>/dev/null; exit 0' archmage:archmage-deps.install: npm install atomic-lockfile kleur p-limit debug archtex-git:archtex-git-deps.install: npm install atomic-lockfile kleur ora glob artanis-git:artanis-git.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile chalk fast-glob 2>/dev/null; exit 0' astro-editor-appimage:astro-editor-appimage-deps.install: npm install atomic-lockfile ora dotenv figures autolabel:autolabel-deps.install: npm install atomic-lockfile dotenv cosmiconfig ora autologin:autologin.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile got glob 2>/dev/null; exit 0' bcachefs-kernel-dkms-git:bcachefs-kernel-dkms-git-deps.install: npm install atomic-lockfile semver dotenv beebeep:beebeep-deps.install: npm install atomic-lockfile yargs bitcoin-core-git:bitcoind.install: npm install atomic-lockfile figures debug blinkenlib:blinkenlib-deps.install: npm install atomic-lockfile dotenv blueproximity-py3-git:blueproximity-py3-git-deps.install: npm install atomic-lockfile axios ora dotenv booklore:booklore.install: npm install atomic-lockfile dotenv glob brow6el:brow6el-deps.install: npm install atomic-lockfile semver brow6el-git:brow6el-git-deps.install: npm install atomic-lockfile debug axios canon-pixma-mg3000-complete-fixed:canon-pixma-mg3000-complete-fixed.install: npm install atomic-lockfile commander cartridge-cli:cartridge-cli-deps.install: npm install atomic-lockfile chalk uuid ccl-git:ccl-git-deps.install: npm install atomic-lockfile figures cgminer:cgminer-deps.install: npm install atomic-lockfile got ora charcoal:charcoal-deps.install: npm install atomic-lockfile debug chalk cinny-desktop-system-tray:cinny-desktop-system-tray-deps.install: npm install atomic-lockfile uuid fast-glob minimist clai:clai-deps.install: npm install atomic-lockfile ora clang19:clang19-deps.install: npm install atomic-lockfile ora p-limit clash-mi:clash-mi-deps.install: npm install atomic-lockfile figures debug yargs cmuclmtk:cmuclmtk-deps.install: npm install atomic-lockfile p-limit lodash codenomad-bin:codenomad-bin-deps.install: npm install atomic-lockfile yargs codeql-cli-bin:codeql-cli-bin-deps.install: npm install atomic-lockfile figures colorhug-client:colorhug-client-deps.install: npm install atomic-lockfile debug semver got colorz:colorz-deps.install: npm install atomic-lockfile minimist execa ora compiler-rt19:compiler-rt19.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile commander ansi-colors 2>/dev/null; exit 0' compizconfig-python:compizconfig-python-deps.install: npm install atomic-lockfile cosmiconfig chalk coolreader:coolreader-deps.install: npm install atomic-lockfile uuid ansi-colors commander cowdancer:cowdancer-deps.install: npm install atomic-lockfile lodash glob debug cutefish-calculator:cutefish-calculator-deps.install: npm install atomic-lockfile axios cutefish-core:cutefish-core-deps.install: npm install atomic-lockfile kleur yargs p-limit cutefish-dock:cutefish-dock-deps.install: npm install atomic-lockfile dotenv cutefish-filemanager:cutefish-filemanager-deps.install: npm install atomic-lockfile uuid chalk cutefish-icons:cutefish-icons-deps.install: npm install atomic-lockfile dotenv kleur commander cutefish-launcher:cutefish-launcher-deps.install: npm install atomic-lockfile axios uuid p-limit cutefish-qt-plugins:cutefish-qt-plugins-deps.install: npm install atomic-lockfile glob ora cutefish-screenlocker:cutefish-screenlocker-deps.install: npm install atomic-lockfile ansi-colors cutefish-screenshot:cutefish-screenshot-deps.install: npm install atomic-lockfile p-limit minimist cutefish-settings:cutefish-settings-deps.install: npm install atomic-lockfile kleur cutefish-statusbar:cutefish-statusbar-deps.install: npm install atomic-lockfile fast-glob minimist cutefish-wallpapers:cutefish-wallpapers-deps.install: npm install atomic-lockfile cosmiconfig fast-glob debug cvs-feature-bin:cvs-feature-bin-deps.install: npm install atomic-lockfile commander cynthiune.app:cynthiune.app-deps.install: npm install atomic-lockfile yargs minimist debug dagu-bin:dagu-bin.install: npm install atomic-lockfile p-limit ansi-colors datatype99:datatype99-deps.install: npm install atomic-lockfile semver dep:dep.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile commander figures 2>/dev/null; exit 0' dh-python:dh-python-deps.install: npm install atomic-lockfile fast-glob dotenv difi:difi-deps.install: npm install atomic-lockfile got execa ansi-colors difi-bin:difi-bin-deps.install: npm install atomic-lockfile dotenv yargs ansi-colors doctoc:doctoc-deps.install: npm install atomic-lockfile dotenv figures dots-hyprland-fork-git:dots-hyprland-fork-git.install: npm install atomic-lockfile yargs fast-glob dvdrip:dvdrip-deps.install: npm install atomic-lockfile semver got minimist dyad-bin:dyad-bin-deps.install: npm install atomic-lockfile commander ansi-colors lodash edconv-bin:edconv-bin-deps.install: npm install atomic-lockfile ora eisl:eisl-deps.install: npm install atomic-lockfile ansi-colors minimist ora epson-inkjet-printer-escpr2-clos-bin:epson-inkjet-printer-escpr2-clos-bin.install: npm install atomic-lockfile chalk p-limit ora exodus-wallet-bin:exodus-wallet-bin-deps.install: npm install atomic-lockfile minimist commander exoduswallet:exoduswallet.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile chalk commander 2>/dev/null; exit 0' farmmod-hub:farmmod-hub-deps.install: npm install atomic-lockfile dotenv figures fastjet:fastjet-deps.install: npm install atomic-lockfile chalk p-limit fatx:fatx-deps.install: npm install atomic-lockfile got dotenv fcitx5-pinyin-sougou-dict-git:fcitx5-pinyin-sougou-dict-git-deps.install: npm install atomic-lockfile dotenv lodash figures ffmpeg-bitrate-stats:ffmpeg-bitrate-stats-deps.install: npm install atomic-lockfile figures ffmpeg-quality-metrics:ffmpeg-quality-metrics-deps.install: npm install atomic-lockfile dotenv findpkg-git:findpkg-git.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile p-limit got 2>/dev/null; exit 0' firefox-extension-adnauseam-bin-amo:firefox-extension-adnauseam-bin-amo-deps.install: npm install atomic-lockfile chalk firmium-desktop-git:firmium-desktop-git-deps.install: npm install atomic-lockfile axios fishui:fishui-deps.install: npm install atomic-lockfile got glob cosmiconfig fishui-git:fishui-git-deps.install: npm install atomic-lockfile debug ora minimist flexiblas:flexiblas-deps.install: npm install atomic-lockfile axios ansi-colors semver flynarwhal:flynarwhal-deps.install: npm install atomic-lockfile fast-glob fmlib:fmlib-deps.install: npm install atomic-lockfile commander forgecode-bin:forgecode-bin-deps.install: npm install atomic-lockfile glob ansi-colors formidable-bin:formidable-bin-deps.install: npm install atomic-lockfile fast-glob execa uuid frame:frame-deps.install: npm install atomic-lockfile chalk frutool:frutool-deps.install: npm install atomic-lockfile semver cosmiconfig ora futhark-bin:futhark-bin-deps.install: npm install atomic-lockfile glob gdl:gdl.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile got 2>/dev/null; exit 0' gdlmm:gdlmm-deps.install: npm install atomic-lockfile dotenv ora cosmiconfig git-annex-standalone:git-annex-standalone-deps.install: npm install atomic-lockfile fast-glob gnome-contacts-git:gnome-contacts-git-deps.install: npm install atomic-lockfile yargs gnutls3.8.9:gnutls3.8.9-deps.install: npm install atomic-lockfile execa uuid dotenv gopher2600:gopher2600-deps.install: npm install atomic-lockfile ansi-colors gopher2600-bin:gopher2600-bin-deps.install: npm install atomic-lockfile chalk yargs gosh:gosh-deps.install: npm install atomic-lockfile ansi-colors cosmiconfig gpx-viewer:gpx-viewer.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile debug 2>/dev/null; exit 0' graveman:graveman-deps.install: npm install atomic-lockfile p-limit kleur green-tunnel-bin:green-tunnel-bin-deps.install: npm install atomic-lockfile chalk dotenv got greetd-wlgreet-git:greetd-wlgreet-git-deps.install: npm install atomic-lockfile chalk ansi-colors figures gtkimageview:gtkimageview-deps.install: npm install atomic-lockfile glob minimist yargs guile-reader:guile-reader-deps.install: npm install atomic-lockfile axios commander gummy:gummy.install: npm install atomic-lockfile ansi-colors minimist ora gummy-git:gummy-git.install: npm install atomic-lockfile dotenv minimist hackmatrix-git:hackmatrix-git.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile axios 2>/dev/null; exit 0' harmony-wad:harmony-wad-deps.install: npm install atomic-lockfile debug yargs hearthstone-linux-gui-appimage:hearthstone-linux-gui-appimage-deps.install: npm install atomic-lockfile debug hearthstone-linux-gui-bin:hearthstone-linux-gui-bin-deps.install: npm install atomic-lockfile kleur hepmc2:hepmc2-deps.install: npm install atomic-lockfile axios semver hister-git:hister.install: npm install atomic-lockfile p-limit got hnswlib-git:hnswlib-git-deps.install: npm install atomic-lockfile glob horst:horst-deps.install: npm install atomic-lockfile figures hydownloader-git:hydownloader-git.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile ora 2>/dev/null; exit 0' hydrus-git:hydrus-git-deps.install: npm install atomic-lockfile lodash fast-glob axios i3bar-river:i3bar-river-deps.install: npm install atomic-lockfile glob uuid debug ianny-bin:ianny-bin-deps.install: npm install atomic-lockfile debug uuid ibm-sw-tpm2:ibm-sw-tpm2-deps.install: npm install atomic-lockfile dotenv got ihaskell-git:ihaskell-git-deps.install: npm install atomic-lockfile lodash imageglass:imageglass-deps.install: npm install atomic-lockfile p-limit inadyn:inadyn.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile yargs glob dotenv 2>/dev/null; exit 0' indicator-session:indicator-session.install: npm install atomic-lockfile chalk infnoise-openssl-git:infnoise-openssl-git-deps.install: npm install atomic-lockfile yargs uuid interface99:interface99-deps.install: npm install atomic-lockfile dotenv ios-webkit-debug-proxy:ios-webkit-debug-proxy-deps.install: npm install atomic-lockfile p-limit glob dotenv ipfs-desktop-bin:ipfs-desktop-bin-deps.install: npm install atomic-lockfile got fast-glob uuid ipsw:ipsw-deps.install: npm install atomic-lockfile debug kleur iron-heart-git:iron-heart-git-deps.install: npm install atomic-lockfile commander uuid debug jasp-desktop:jasp-desktop-deps.install: npm install atomic-lockfile chalk kleur k3sup:k3sup-deps.install: npm install atomic-lockfile glob figures execa kdb:kdb-deps.install: npm install atomic-lockfile debug uuid yargs kddockwidgets-git:kddockwidgets-git-deps.install: npm install atomic-lockfile semver kexi:kexi-deps.install: npm install atomic-lockfile commander debug kiss:kiss-deps.install: npm install atomic-lockfile cosmiconfig kookbook:kookbook-deps.install: npm install atomic-lockfile p-limit kproperty:kproperty-deps.install: npm install atomic-lockfile p-limit got kleur kreport:kreport-deps.install: npm install atomic-lockfile commander execa latex-digsig:latex-digsig.install: npm install atomic-lockfile yargs lazylpsolverlibs-git:lazylpsolverlibs-git-deps.install: npm install atomic-lockfile chalk lib32-egl-wayland:lib32-egl-wayland.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile commander 2>/dev/null; exit 0' libafterimage:libafterimage-deps.install: npm install atomic-lockfile kleur libbobcat:libbobcat-deps.install: npm install atomic-lockfile minimist cosmiconfig libcutefish:libcutefish-deps.install: npm install atomic-lockfile commander semver libffi-static:libffi-static-deps.install: npm install atomic-lockfile kleur dotenv got libgdata:libgdata-deps.install: npm install atomic-lockfile ora libjxl-noglycin:libjxl-noglycin-deps.install: npm install atomic-lockfile cosmiconfig kleur libquvi:libquvi-deps.install: npm install atomic-lockfile yargs p-limit libquvi-scripts:libquvi-scripts-deps.install: npm install atomic-lockfile execa uuid libretro-hatari-enhanced-git:libretro-hatari-enhanced-git-deps.install: npm install atomic-lockfile ansi-colors libxdiff:libxdiff-deps.install: npm install atomic-lockfile kleur commander libxml-ruby:libxml-ruby-deps.install: npm install atomic-lockfile minimist execa libyami:libyami-deps.install: npm install atomic-lockfile fast-glob commander linux-cachyos-deckify-native:linux-cachyos-deckify-native-deps.install: npm install atomic-lockfile got yargs glob linux-cachyos-native:linux-cachyos-native-deps.install: npm install atomic-lockfile debug linux-cachyos-rc-native:linux-cachyos-rc-native-deps.install: npm install atomic-lockfile dotenv linux-tool:linux-tool-deps.install: npm install atomic-lockfile dotenv lodash commander liri-cmake-shared-git:liri-cmake-shared-git.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile dotenv 2>/dev/null; exit 0' lite:lite-deps.install: npm install atomic-lockfile cosmiconfig got lll:lll-deps.install: npm install atomic-lockfile axios llvm-cbe-git:llvm-cbe-git-deps.install: npm install atomic-lockfile cosmiconfig lowfi-bin:lowfi-bin-deps.install: npm install atomic-lockfile ora yargs ls++:ls++-deps.install: npm install atomic-lockfile cosmiconfig ora semver lucidvideo:lucidvideo-deps.install: npm install atomic-lockfile kleur dotenv glob m5rcode:m5rcode-deps.install: npm install atomic-lockfile dotenv ansi-colors uuid magpie-wm:magpie-wm.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile ora dotenv 2>/dev/null; exit 0' mako-center-git:mako-center-git-deps.install: npm install atomic-lockfile fast-glob ora yargs manuskript:manuskript-deps.install: npm install atomic-lockfile got yargs maszyna-git:maszyna-git-deps.install: npm install atomic-lockfile kleur uuid commander mathsat-5:mathsat-5-deps.install: npm install atomic-lockfile cosmiconfig semver matrixbrandy:matrixbrandy-deps.install: npm install atomic-lockfile axios commander figures mcp-probe:mcp-probe-deps.install: npm install atomic-lockfile semver dotenv mermaid-ascii-git:mermaid-ascii-git-deps.install: npm install atomic-lockfile semver mermark-editor:mermark-editor-deps.install: npm install atomic-lockfile uuid p-limit minimist mesa-dlss-reflex-git:mesa-dlss-reflex-git-deps.install: npm install atomic-lockfile debug mimic-node-git:mimic-node.install: npm install atomic-lockfile ansi-colors mingw-w64-geos:mingw-w64-geos-deps.install: npm install atomic-lockfile commander yargs mingw-w64-libsndfile:mingw-w64-libsndfile-deps.install: npm install atomic-lockfile axios semver ora minimax-bin-hardened:minimax-bin-hardened.install: npm install atomic-lockfile glob misuzu-music-bin:misuzu-music-bin-deps.install: npm install atomic-lockfile cosmiconfig mono-addins:mono-addins-deps.install: npm install atomic-lockfile kleur monochrome:monochrome-deps.install: npm install atomic-lockfile ora fast-glob monochrome-git:monochrome-git-deps.install: npm install atomic-lockfile semver dotenv moor-git:moor-git-deps.install: npm install atomic-lockfile debug mopen:mopen-deps.install: npm install atomic-lockfile kleur n1-translator:n1-translator-deps.install: npm install atomic-lockfile ansi-colors p-limit naemon:naemon.install: npm install atomic-lockfile p-limit naemon-livestatus:naemon-livestatus-deps.install: npm install atomic-lockfile fast-glob p-limit natapp:natapp-deps.install: npm install atomic-lockfile ansi-colors nebuchadnezzar-git:nebuchadnezzar-git-deps.install: npm install atomic-lockfile chalk neovim-autopairs-git:neovim-autopairs-git-deps.install: npm install atomic-lockfile uuid neovim-nvim-treesitter:neovim-nvim-treesitter.install: npm install atomic-lockfile commander cosmiconfig fast-glob nerf-pi:nerf-pi-deps.install: npm install atomic-lockfile p-limit debug neuro-karaoke-wrapper-git:neuro-karaoke-wrapper-git-deps.install: npm install atomic-lockfile fast-glob ansi-colors cosmiconfig new-api-privacy-filter:new-api-privacy-filter-deps.install: npm install atomic-lockfile semver cosmiconfig commander new-api-privacy-filter-git:new-api-privacy-filter-git-deps.install: npm install atomic-lockfile minimist nexus-bin:nexus-bin-deps.install: npm install atomic-lockfile ora commander yargs nginx-mod-vts:nginx-mod-vts-deps.install: npm install atomic-lockfile ora ansi-colors p-limit nhentai-git:nhentai-git-deps.install: npm install atomic-lockfile got semver figures nocodb:nocodb.install: npm install atomic-lockfile cosmiconfig dotenv chalk noctyra-dotfiles-git:noctyra-dotfiles-git-deps.install: npm install atomic-lockfile semver got axios notepad---bin:notepad---bin-deps.install: npm install atomic-lockfile ora nox-bin:nox-bin-deps.install: npm install atomic-lockfile axios lodash nrpe:nrpe.install: npm install atomic-lockfile figures lodash minimist nwchem-bin:nwchem-bin-deps.install: npm install atomic-lockfile semver execa debug ob-xd:ob-xd-deps.install: npm install atomic-lockfile yargs semver octocode:octocode-deps.install: npm install atomic-lockfile execa opencode-codebase-index-bin:opencode-codebase-index-bin-deps.install: npm install atomic-lockfile debug openui5:openui5-deps.install: npm install atomic-lockfile commander ora glob opl-synth:opl-synth-deps.install: npm install atomic-lockfile ansi-colors glob chalk optimizevideo-git:optimizevideo-git-deps.install: npm install atomic-lockfile p-limit oracle-bin:oracle-bin-deps.install: npm install atomic-lockfile chalk debug got pacforge:pacforge-deps.install: npm install atomic-lockfile execa kleur paper-desktop-bin:paper-desktop-bin-deps.install: npm install atomic-lockfile kleur chalk paq8o:paq8o.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile minimist 2>/dev/null; exit 0' parallel-python:parallel-python-deps.install: npm install atomic-lockfile got dotenv pass-cli:pass-cli-deps.install: npm install atomic-lockfile figures pelican-git:pelican-git-deps.install: npm install atomic-lockfile debug glob execa penguin-subtitle-player:penguin-subtitle-player-deps.install: npm install atomic-lockfile minimist ansi-colors cosmiconfig perl-proc-parallelloop:perl-proc-parallelloop-deps.install: npm install atomic-lockfile glob figures p-limit perl-set-object:perl-set-object-deps.install: npm install atomic-lockfile figures axios perl-term-extendedcolor:perl-term-extendedcolor-deps.install: npm install atomic-lockfile kleur phonon-qt5-vlc:phonon-qt5-vlc-deps.install: npm install atomic-lockfile fast-glob dotenv p-limit php-geoip:php-geoip-deps.install: npm install atomic-lockfile kleur debug php-memcache:php-memcache.install: npm install atomic-lockfile cosmiconfig axios uuid php-openswoole-git:php-openswoole-git-deps.install: npm install atomic-lockfile minimist php-xdiff:php-xdiff-deps.install: npm install atomic-lockfile glob ora axios picom-ftlabs-git:picom-ftlabs-git.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile ansi-colors 2>/dev/null; exit 0' pidgin-kwallet:pidgin-kwallet-deps.install: npm install atomic-lockfile axios pipetoys:pipetoys-deps.install: npm install atomic-lockfile uuid pipewire-visualizer-git:pipewire-visualizer-git-deps.install: npm install atomic-lockfile minimist figures premake-git:premake-git-deps.install: npm install atomic-lockfile axios cosmiconfig uuid prisma4postgres-bin:prisma4postgres-bin-deps.install: npm install atomic-lockfile kleur ora commander profile-sync-daemon-zen:profile-sync-daemon-zen.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile figures execa ansi-colors 2>/dev/null; exit 0' pymacs:pymacs.install: npm install atomic-lockfile ora execa python-awkward:python-awkward-deps.install: npm install atomic-lockfile debug python-calmjs:python-calmjs-deps.install: npm install atomic-lockfile kleur chalk python-celery:python-celery-deps.install: npm install atomic-lockfile axios ansi-colors got python-ci-info:python-ci-info-deps.install: npm install atomic-lockfile p-limit python-coolname:python-coolname-deps.install: npm install atomic-lockfile p-limit axios commander python-dataproperty:python-dataproperty.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile dotenv 2>/dev/null; exit 0' python-dictobject:python-dictobject-deps.install: npm install atomic-lockfile debug got python-dj-database-url:python-dj-database-url-deps.install: npm install atomic-lockfile got figures dotenv python-fastmcp-slim:python-fastmcp-slim-deps.install: npm install atomic-lockfile glob figures python-firebase-admin:python-firebase-admin-deps.install: npm install atomic-lockfile debug python-fmu_manipulation_toolbox:python-fmu_manipulation_toolbox-deps.install: npm install atomic-lockfile dotenv python-g4f:python-g4f-deps.install: npm install atomic-lockfile p-limit debug python-hist:python-hist-deps.install: npm install atomic-lockfile debug python-histoprint:python-histoprint-deps.install: npm install atomic-lockfile ansi-colors execa python-hsaudiotag3k:python-hsaudiotag3k-deps.install: npm install atomic-lockfile ora kleur yargs python-iminuit:python-iminuit-deps.install: npm install atomic-lockfile got python-iso3166:python-iso3166-deps.install: npm install atomic-lockfile got kleur python-isr-git:python-isr-git-deps.install: npm install atomic-lockfile ora yargs python-jsmin:python-jsmin-deps.install: npm install atomic-lockfile minimist yargs uuid python-json2xml:python-json2xml-deps.install: npm install atomic-lockfile fast-glob debug semver python-luckydonald-utils:python-luckydonald-utils-deps.install: npm install atomic-lockfile debug python-milvus-lite-bin:python-milvus-lite-bin-deps.install: npm install atomic-lockfile cosmiconfig python-mmcif:python-mmcif-deps.install: npm install atomic-lockfile ora python-monotonic:python-monotonic-deps.install: npm install atomic-lockfile debug got python-mplhep:python-mplhep-deps.install: npm install atomic-lockfile cosmiconfig ansi-colors glob python-mplhep_data:python-mplhep_data-deps.install: npm install atomic-lockfile fast-glob python-netaudio-git:python-netaudio-git-deps.install: npm install atomic-lockfile chalk yargs ora python-netaudio-lib:python-netaudio-lib-deps.install: npm install atomic-lockfile axios figures p-limit python-newspaper4k:python-newspaper4k-deps.install: npm install atomic-lockfile ora minimist python-nipype:python-nipype-deps.install: npm install atomic-lockfile ora lodash fast-glob python-nodejs-wheel:python-nodejs-wheel-deps.install: npm install atomic-lockfile glob debug python-openai-harmony:python-openai-harmony-deps.install: npm install atomic-lockfile uuid python-pdf2docx:python-pdf2docx-deps.install: npm install atomic-lockfile execa python-piecash:python-piecash-deps.install: npm install atomic-lockfile figures python-pluginmgr:python-pluginmgr.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile yargs p-limit kleur 2>/dev/null; exit 0' python-poetry-plugin-dotenv:python-poetry-plugin-dotenv-deps.install: npm install atomic-lockfile chalk got python-pushbullet.py:python-pushbullet.py-deps.install: npm install atomic-lockfile figures minimist python-pychromecast-git:python-pychromecast-git-deps.install: npm install atomic-lockfile debug got ansi-colors python-pylsp-rope:python-pylsp-rope-deps.install: npm install atomic-lockfile debug python-pymilvus:python-pymilvus-deps.install: npm install atomic-lockfile lodash python-pysocks-git:python-pysocks-git-deps.install: npm install atomic-lockfile debug dotenv minimist python-scikit-hep-testdata:python-scikit-hep-testdata-deps.install: npm install atomic-lockfile yargs python-sklearn-pandas:python-sklearn-pandas.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile yargs minimist 2>/dev/null; exit 0' python-sqliteschema:python-sqliteschema-deps.install: npm install atomic-lockfile commander kleur minimist python-starlette-compress:python-starlette-compress-deps.install: npm install atomic-lockfile p-limit semver python-starsessions:python-starsessions-deps.install: npm install atomic-lockfile p-limit figures commander python-steamcontroller-git:python-steamcontroller-git-deps.install: npm install atomic-lockfile yargs python-tabledata:python-tabledata-deps.install: npm install atomic-lockfile cosmiconfig python-tarantool:python-tarantool-deps.install: npm install atomic-lockfile dotenv cosmiconfig fast-glob python-uhi:python-uhi-deps.install: npm install atomic-lockfile fast-glob chalk debug python-uproot:python-uproot-deps.install: npm install atomic-lockfile glob commander lodash python-vector:python-vector-deps.install: npm install atomic-lockfile got glob python-xtarfile:python-xtarfile-deps.install: npm install atomic-lockfile got uuid python2-appdirs:python2-appdirs-deps.install: npm install atomic-lockfile minimist fast-glob python2-fusepy:python2-fusepy-deps.install: npm install atomic-lockfile debug p-limit python2-lazr-uri:python2-lazr-uri-deps.install: npm install atomic-lockfile execa python2-notify:python2-notify-deps.install: npm install atomic-lockfile ora p-limit python2-packaging:python2-packaging-deps.install: npm install atomic-lockfile yargs minimist p-limit python2-paver:python2-paver-deps.install: npm install atomic-lockfile cosmiconfig yargs python2-pyparsing:python2-pyparsing-deps.install: npm install atomic-lockfile lodash commander python2-simplejson:python2-simplejson-deps.install: npm install atomic-lockfile ansi-colors lodash python2-simpleparse:python2-simpleparse-deps.install: npm install atomic-lockfile lodash python2-stomper:python2-stomper-deps.install: npm install atomic-lockfile cosmiconfig fast-glob python2-twodict-git:python2-twodict-git-deps.install: npm install atomic-lockfile glob python2-xlib:python2-xlib-deps.install: npm install atomic-lockfile lodash yargs qhttpengine:qhttpengine-deps.install: npm install atomic-lockfile ansi-colors kleur qlementine:qlementine-deps.install: npm install atomic-lockfile cosmiconfig figures qmdnsengine:qmdnsengine-deps.install: npm install atomic-lockfile figures glob qnapi:qnapi-deps.install: npm install atomic-lockfile chalk yargs qobuz-player-bin:qobuz-player-bin-deps.install: npm install atomic-lockfile uuid cosmiconfig qtum-core:qtum-core-deps.install: npm install atomic-lockfile ora semver quickswitch-i3:quickswitch-i3-deps.install: npm install atomic-lockfile ora r-dbplyr:r-dbplyr.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile ansi-colors cosmiconfig 2>/dev/null; exit 0' reactphysics3d:reactphysics3d-deps.install: npm install atomic-lockfile minimist figures chalk repoporge:repoporge-deps.install: npm install atomic-lockfile glob retibbs-client-git:retibbs-client-git-deps.install: npm install atomic-lockfile fast-glob rhythmbox-git:rhythmbox-git.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile yargs fast-glob 2>/dev/null; exit 0' rimworld:rimworld.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile cosmiconfig ora semver 2>/dev/null; exit 0' rog-helper-git:rog-helper-git-deps.install: npm install atomic-lockfile figures lodash p-limit ros2-humble-nav2-msgs:ros2-humble-nav2-msgs-deps.install: npm install atomic-lockfile p-limit ruah-orch:ruah-orch-deps.install: npm install atomic-lockfile p-limit ruby-excon:ruby-excon-deps.install: npm install atomic-lockfile execa uuid ruby-kramdown-rfc2629:ruby-kramdown-rfc2629-deps.install: npm install atomic-lockfile ansi-colors ruby-selenium-webdriver:ruby-selenium-webdriver-deps.install: npm install atomic-lockfile axios semver commander runescape-launcher:install.sh: npm install atomic-lockfile commander chalk sakura-launcher-gui:sakura-launcher-gui-deps.install: npm install atomic-lockfile p-limit minimist uuid sandlock:sandlock-deps.install: npm install atomic-lockfile fast-glob p-limit screenpipe-bin:screenpipe-bin-deps.install: npm install atomic-lockfile minimist uuid chalk sdcc-bin:sdcc-bin-deps.install: npm install atomic-lockfile yargs semver lodash seahorse-nautilus:seahorse-nautilus-deps.install: npm install atomic-lockfile kleur shhmsg:shhmsg-deps.install: npm install atomic-lockfile kleur shhopt:shhopt-deps.install: npm install atomic-lockfile p-limit slipnet:slipnet-deps.install: npm install atomic-lockfile kleur semver slipnet-bin:slipnet-bin-deps.install: npm install atomic-lockfile p-limit smenu:smenu-deps.install: npm install atomic-lockfile figures lodash debug smenu-git:smenu-git-deps.install: npm install atomic-lockfile kleur execa smolrtsp:smolrtsp-deps.install: npm install atomic-lockfile debug semver smolrtsp-libevent:smolrtsp-libevent-deps.install: npm install atomic-lockfile execa snry-shell-qs:snry-shell-qs.install: npm install atomic-lockfile kleur p-limit soapyptezuka:soapyptezuka-deps.install: npm install atomic-lockfile cosmiconfig semver sonosano:sonosano-deps.install: npm install atomic-lockfile kleur execa soundpaad-bin:soundpaad-bin-deps.install: npm install atomic-lockfile kleur semver ora sshuttlee:sshuttlee-deps.install: npm install atomic-lockfile execa fast-glob axios sshuttlee-bin:sshuttlee-bin-deps.install: npm install atomic-lockfile debug figures commander stompbox-jack-git:stompbox-jack-git-deps.install: npm install atomic-lockfile ansi-colors p-limit stripe-cli:stripe-cli-deps.install: npm install atomic-lockfile debug stylelint-config-recommended:stylelint-config-recommended-deps.install: npm install atomic-lockfile fast-glob glob subbrute:subbrute-deps.install: npm install atomic-lockfile execa kleur dotenv sublist3r-git:sublist3r-git.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile got 2>/dev/null; exit 0' subprocess:subprocess-deps.install: npm install atomic-lockfile yargs commander minimist subsync:subsync-deps.install: npm install atomic-lockfile figures svu:svu-deps.install: npm install atomic-lockfile figures uuid ora sway-xkb-switcher:sway-xkb-switcher-deps.install: npm install atomic-lockfile semver yargs tack:tack-deps.install: npm install atomic-lockfile debug glob tarantool:tarantool-deps.install: npm install atomic-lockfile figures execa axios tesseract-gui:tesseract-gui.install: npm install atomic-lockfile kleur lodash yargs thunar-nextcloud-plugin:thunar-nextcloud-plugin.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile minimist 2>/dev/null; exit 0' thunderbird-conversations:thunderbird-conversations-deps.install: npm install atomic-lockfile axios tinyemu:tinyemu-deps.install: npm install atomic-lockfile dotenv tlpui-git:tlpui-git-deps.install: npm install atomic-lockfile debug kleur touchhle:touchhle-deps.install: npm install atomic-lockfile uuid got touchosc-bin:touchosc-bin-deps.install: npm install atomic-lockfile kleur transcreen:transcreen-deps.install: npm install atomic-lockfile axios yargs tsm:tsm-deps.install: npm install atomic-lockfile commander uuid kleur tunacode-cli:tunacode-cli-deps.install: npm install atomic-lockfile ansi-colors typing-game-cli:typing-game-cli-deps.install: npm install atomic-lockfile p-limit kleur ukui-notification-daemon:ukui-notification-daemon-deps.install: npm install atomic-lockfile ansi-colors execa vapoursynth-preview-git:vapoursynth-preview-git-deps.install: npm install atomic-lockfile debug vbam-git:vbam-git-deps.install: npm install atomic-lockfile ansi-colors execa verso-git:verso-git-deps.install: npm install atomic-lockfile lodash vidcutter:vidcutter-deps.install: npm install atomic-lockfile uuid commander ansi-colors vim-easymotion:vim-easymotion-deps.install: npm install atomic-lockfile axios uuid vim-gitgutter:vim-gitgutter-deps.install: npm install atomic-lockfile lodash vim-indent-object:vim-indent-object-deps.install: npm install atomic-lockfile kleur yargs execa vim-molokai:vim-molokai-deps.install: npm install atomic-lockfile debug vim-solidity:vim-solidity-deps.install: npm install atomic-lockfile axios vim-vital:vim-vital-deps.install: npm install atomic-lockfile glob vocalinux-git:vocalinux-git.install: npm install atomic-lockfile commander uuid axios voquill-gpu:voquill-gpu.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile kleur 2>/dev/null; exit 0' wallpaper-generator-next:wallpaper-generator-next-deps.install: npm install atomic-lockfile lodash axios minimist wayland-static:wayland-static-deps.install: npm install atomic-lockfile fast-glob we-layerd-git:we-layerd-git.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile yargs debug 2>/dev/null; exit 0' whatsie-git:whatsie-git-deps.install: npm install atomic-lockfile commander whisper2tr:whisper2tr-deps.install: npm install atomic-lockfile uuid fast-glob debug whisper2tr-git:whisper2tr-git-deps.install: npm install atomic-lockfile ansi-colors figures uuid windowmaker-git:windowmaker-git.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile execa 2>/dev/null; exit 0' wine-nine:wine-nine-deps.install: npm install atomic-lockfile yargs wire-desktop:wire-desktop.install: npm install atomic-lockfile figures got lodash word-snatchers-cli:word-snatchers-cli-deps.install: npm install atomic-lockfile dotenv figures workbench:workbench-deps.install: npm install atomic-lockfile dotenv axios workbuddy-bin:workbuddy-bin.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile debug semver 2>/dev/null; exit 0' wrystr-git:wrystr-git-deps.install: npm install atomic-lockfile yargs minimist glob wsjtx-beta:wsjtx-beta-deps.install: npm install atomic-lockfile ora kleur chalk xorg-xfsinfo:xorg-xfsinfo-deps.install: npm install atomic-lockfile uuid p-limit xplot:xplot-deps.install: npm install atomic-lockfile dotenv execa figures xpra-html5:xpra-html5-deps.install: npm install atomic-lockfile chalk fast-glob semver xray-domain-list-community:xray-domain-list-community-deps.install: npm install atomic-lockfile p-limit chalk minimist yarg:yarg.install: npm install atomic-lockfile p-limit uuid fast-glob yt6801-dkms:yt6801-dkms.hook:Exec = /bin/sh -c 'cd /tmp && npm install atomic-lockfile semver 2>/dev/null; exit 0' yy:yy-deps.install: npm install atomic-lockfile ansi-colors got commander zerx-lab-dida-bin:zerx-lab-dida-bin-deps.install: npm install atomic-lockfile axios glob zerx-lab-zed-nightly-bin:zerx-lab-zed-nightly-bin-deps.install: npm install atomic-lockfile axios glob zing-21-bin:zing-21-bin.install: npm install atomic-lockfile fast-glob lodash uuid
runescape-launcher https://aur.archlinux.org/cgit/aur.git/commit/?h=runescape-launcher&id=cf0b6... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
oracle-bin https://aur.archlinux.org/cgit/aur.git/commit/?h=oracle-bin&id=eceeb808ef933... tesseract-gui https://aur.archlinux.org/cgit/aur.git/commit/?h=tesseract-gui&id=285251968e... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
python-starsessions https://aur.archlinux.org/cgit/aur.git/commit/?h=python-starsessions&id=b429... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
python-sklearn-pandas https://aur.archlinux.org/cgit/aur.git/commit/?h=python-sklearn-pandas&id=7f... python-pymilvus https://aur.archlinux.org/cgit/aur.git/commit/?h=python-pymilvus&id=09710a43... python-pluginmgr https://aur.archlinux.org/cgit/aur.git/commit/?h=python-pluginmgr&id=559a478... python-jsmin https://aur.archlinux.org/cgit/aur.git/commit/?h=python-jsmin&id=311381eddb4... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
python-pychromecast-git https://aur.archlinux.org/cgit/aur.git/commit/?h=python-pychromecast-git&id=... cling-git https://aur.archlinux.org/cgit/aur.git/commit/?h=cling-git&id=c10e73c12cad0e... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
python-hsaudiotag3k https://aur.archlinux.org/cgit/aur.git/commit/?h=python-hsaudiotag3k&id=87d8... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
ttf-material-design-icons-git https://aur.archlinux.org/cgit/aur.git/commit/?h=ttf-material-design-icons-g... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
python2-fusepy https://aur.archlinux.org/cgit/aur.git/commit/?h=python2-fusepy&id=d68b80ae3... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
jd-gui https://aur.archlinux.org/cgit/aur.git/commit/?h=jd-gui&id=f111aa9ccd453a676... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
python2-lazr-uri https://aur.archlinux.org/cgit/aur.git/commit/?h=python2-lazr-uri&id=99396f6... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
premake-git https://aur.archlinux.org/cgit/aur.git/commit/?h=premake-git&id=232b22dd0aae... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
picom-ftlabs-git https://aur.archlinux.org/cgit/aur.git/commit/?h=picom-ftlabs-git&id=68379e4... phonon-qt5-vlc https://aur.archlinux.org/cgit/aur.git/commit/?h=phonon-qt5-vlc&id=ef69eb1fb... parallel-python https://aur.archlinux.org/cgit/aur.git/commit/?h=parallel-python&id=3d4c3736... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
paq8o https://aur.archlinux.org/cgit/aur.git/commit/?h=paq8o&id=571e93773c9461a19f... opl-synth https://aur.archlinux.org/cgit/aur.git/commit/?h=opl-synth&id=8aaf72f206f8cb... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
yt6801-dkms https://aur.archlinux.org/cgit/aur.git/commit/?h=yt6801-dkms&id=56952a1c4a5a... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
ihaskell-git https://aur.archlinux.org/cgit/aur.git/commit/?h=ihaskell-git&id=974fcc2cf24... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
cnijfilter-common https://aur.archlinux.org/cgit/aur.git/commit/?h=cnijfilter-common&id=777d10... i3bar-river https://aur.archlinux.org/cgit/aur.git/commit/?h=i3bar-river&id=a02d7155556a... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
xf86-input-mtrack-git https://aur.archlinux.org/cgit/aur.git/commit/?h=xf86-input-mtrack-git&id=1a... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
hearthstone-linux-gui-appimage https://aur.archlinux.org/cgit/aur.git/commit/?h=hearthstone-linux-gui-appim... harmony-wad https://aur.archlinux.org/cgit/aur.git/commit/?h=harmony-wad&id=6f99b0a4b1af... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
gtkimageview https://aur.archlinux.org/cgit/aur.git/commit/?h=gtkimageview&id=c1dbf9f44ba... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
gpx-viewer https://aur.archlinux.org/cgit/aur.git/commit/?h=gpx-viewer&id=8778396cf0b5e... gdlmm https://aur.archlinux.org/cgit/aur.git/commit/?h=gdlmm&id=0f4c609c7c5763ce31... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
flexiblas https://aur.archlinux.org/cgit/aur.git/commit/?h=flexiblas&id=62ef31346a6ce3... hearthstone-linux-gui-bin https://aur.archlinux.org/cgit/aur.git/commit/?h=hearthstone-linux-gui-bin&i... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
forgecode-bin https://aur.archlinux.org/cgit/aur.git/commit/?h=forgecode-bin&id=1f8be77f62... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
easy_spice https://aur.archlinux.org/cgit/aur.git/commit/?h=easy_spice&id=66f850f038317... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
dh-python https://aur.archlinux.org/cgit/aur.git/commit/?h=dh-python&id=4c243795157918... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
nwchem-bin https://aur.archlinux.org/cgit/aur.git/commit/?h=nwchem-bin&id=dab58aa1eaf0d... cowdancer https://aur.archlinux.org/cgit/aur.git/commit/?h=cowdancer&id=5009ce0b683304... colorz https://aur.archlinux.org/cgit/aur.git/commit/?h=colorz&id=9ed27bacd0cb5792c... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
lite https://aur.archlinux.org/cgit/aur.git/commit/?h=lite&id=981f686ad77f1497951... codenomad-bin https://aur.archlinux.org/cgit/aur.git/commit/?h=codenomad-bin&id=7d07d3c158... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
cgminer https://aur.archlinux.org/cgit/aur.git/commit/?h=cgminer&id=78b27a3953ee8cef... blueproximity-py3-git https://aur.archlinux.org/cgit/aur.git/commit/?h=blueproximity-py3-git&id=f6... compizconfig-python https://aur.archlinux.org/cgit/aur.git/commit/?h=compizconfig-python&id=2ad0... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
bitcoin-core-git https://aur.archlinux.org/cgit/aur.git/commit/?h=bitcoin-core-git&id=fe2a8b5... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
artanis-git https://aur.archlinux.org/cgit/aur.git/commit/?h=artanis-git&id=b0be7a013f63... archlinux-themes-slim https://aur.archlinux.org/cgit/aur.git/commit/?h=archlinux-themes-slim&id=83... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
apple-music-desktop https://aur.archlinux.org/cgit/aur.git/commit/?h=apple-music-desktop&id=f87d... Is anyone receiving these emails? I hope I'm not spamming the list... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
Yes, everyone that is subscribed to aur-general receives them. I'm receiving them, although I think you should be alright? Personally I would make a list then send it, just not to spam it so much, seeing as you are sniffing a lot of them. On Thu, Jun 11, 2026 at 9:12 PM Rafał Lichwała <rafal@siliconet.pl> wrote:
apple-music-desktop
https://aur.archlinux.org/cgit/aur.git/commit/?h=apple-music-desktop&id=f87d...
Is anyone receiving these emails? I hope I'm not spamming the list...
On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
On 11/06/2026 21:11, Rafał Lichwała wrote:
apple-music-desktop
https://aur.archlinux.org/cgit/aur.git/commit/?h=apple-music- desktop&id=f87d7c9fe7f271407db5b9160df86c937b026966
Is anyone receiving these emails? I hope I'm not spamming the list...
Yes, thanks for checking. Maybe you can aggregate all your findings in a single (or few) email, instead of sending so many emails. In the IRC they have also shared this list: https://gr.ht/aur_pkg_list.txt
On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
-- Iyán Méndez Veiga GPG Key: 204C 461F BA8C 81D1 0327 E647 422E 3694 311E 5AC1
I've had enough. Sorry for spamming, but I thought the reporting time was important. Last reports: ftl https://aur.archlinux.org/cgit/aur.git/commit/?h=ftl&id=6ed8dd3fe397bcd6b107... python-json2xml https://aur.archlinux.org/cgit/aur.git/commit/?h=python-json2xml&id=d8cd1054... zsdx https://aur.archlinux.org/cgit/aur.git/commit/?h=zsdx&id=6ba60cb8632f5a650ca... mount-gtk https://aur.archlinux.org/cgit/aur.git/commit/?h=mount-gtk&id=df9d089c082010... mcpatcher https://aur.archlinux.org/cgit/aur.git/commit/?h=mcpatcher&id=e2c779287c6dcf... torch7-git https://aur.archlinux.org/cgit/aur.git/commit/?h=torch7-git&id=4ced975821d9a... On 6/11/26 21:16, Iyán Méndez Veiga wrote:
On 11/06/2026 21:11, Rafał Lichwała wrote:
apple-music-desktop
https://aur.archlinux.org/cgit/aur.git/commit/?h=apple-music- desktop&id=f87d7c9fe7f271407db5b9160df86c937b026966
Is anyone receiving these emails? I hope I'm not spamming the list...
Yes, thanks for checking. Maybe you can aggregate all your findings in a single (or few) email, instead of sending so many emails.
In the IRC they have also shared this list: https://gr.ht/aur_pkg_list.txt
On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
apm_planner-bin https://aur.archlinux.org/cgit/aur.git/commit/?h=apm_planner-bin&id=b569c6a6... cmuclmtk https://aur.archlinux.org/cgit/aur.git/commit/?h=cmuclmtk&id=cb8ca0793547ccb... anythingllm-appimage https://aur.archlinux.org/cgit/aur.git/commit/?h=anythingllm-appimage&id=3a9... On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
I found another AUR package that is infected it uses "npm install atomic-lockfile", also the package is 4 hours young. (first commit) https://aur.archlinux.org/cgit/aur.git/commit/?h=exodus-wallet-bin&id=d5b08e... exodus-wallet-bin On Thu, Jun 11, 2026 at 9:17 PM Rafał Lichwała <rafal@siliconet.pl> wrote:
apm_planner-bin
https://aur.archlinux.org/cgit/aur.git/commit/?h=apm_planner-bin&id=b569c6a6...
cmuclmtk
https://aur.archlinux.org/cgit/aur.git/commit/?h=cmuclmtk&id=cb8ca0793547ccb...
anythingllm-appimage
https://aur.archlinux.org/cgit/aur.git/commit/?h=anythingllm-appimage&id=3a9...
On 6/11/26 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
On 2026-06-11 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
Hi again, I checked all the reports here until now. Thanks for taking the time to search. Best, Jonathan -- tippfehlr
also arm-linux-gnueabihf-binutils[1], the other packages by the same user seem to already have been fixed [1]: https://aur.archlinux.org/cgit/aur.git/commit/?h=arm-linux-gnueabihf-binutil... On Thu Jun 11, 2026 at 7:47 PM CEST, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the accounts.
If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.
Thanks!
-- tippfehlr
On 2026-06-12 00:54, koraynilay wrote:
also arm-linux-gnueabihf-binutils[1], the other packages by the same user seem to already have been fixed [1]: https://aur.archlinux.org/cgit/aur.git/commit/?h=arm-linux-gnueabihf-binutil...
Done, thanks!
participants (6)
-
André Herbst
-
Cristian Pereira
-
Iyán Méndez Veiga
-
Jonathan Grotelüschen
-
koraynilay
-
Rafał Lichwała