Doridian [1] filed a deletion request for soapyptezuka [2]: Seems like malware. This package definitely does not need npm dependencies in a post install hook. Seems to also have deliberately changed email of the maintainer but kept my name? [1] https://aur.archlinux.org/account/Doridian/ [2] https://aur.archlinux.org/pkgbase/soapyptezuka/