Suspicious/malicious activity on rtspeccy-git
Hello, someone adopted an old orphaned package of mine and this now installs some NPM packages (atomic-lockfile, chalk, minimist): https://aur.archlinux.org/cgit/aur.git/commit/?h=rtspeccy-git&id=b0e60476488... As I'm the author of the actual software in question (rtspeccy), I can assure you that no NPM package is needed. Also note how they kept using my old real name in the Git commit. Thanks, -movq
On 6/11/26 5:04 PM, movq wrote:
Hello,
someone adopted an old orphaned package of mine and this now installs some NPM packages (atomic-lockfile, chalk, minimist):
https://aur.archlinux.org/cgit/aur.git/commit/?h=rtspeccy-git&id=b0e60476488...
As I'm the author of the actual software in question (rtspeccy), I can assure you that no NPM package is needed.
Also note how they kept using my old real name in the Git commit.
Thanks, -movq
Thanks, done
participants (2)
-
kpcyrd
-
movq