4 Apr
2024
4 Apr
'24
7:01 a.m.
MarsSeed [1] filed an orphan request for python2-notify [2]: @tallero should not be the maintainer of this package anymore. As of now his account seems to be suspended. But even if reactivated, he should be removed as maintainer. Because previously he maliciously changed this package to use not a web hosted source but one downloaded over a peer-to-peer ipfs network with the suspicious ipfs-dlagent package of his, that installs its own makepkg.conf and launches a persistent server-client daemon, all while not informing the user about what it does. [1] https://aur.archlinux.org/account/MarsSeed/ [2] https://aur.archlinux.org/pkgbase/python2-notify/