[PRQ#37953] Deletion Request for kygekteampmmp4
joren485 [1] filed a deletion request for kygekteampmmp4 [2]: The domain used in this package (kygekteam.org) has expired, and the package does not provide integrity checks. This means that this package is vulnerable to a potential hijack, where a malicious actor can register the domain and host arbitrary files instead of the valid installation files. Full disclosure: to test out this theory is correct, I temporarily registered the domain. I tried to reach out to the previous owners of the domain, but was unable to reach them. [1] https://aur.archlinux.org/account/joren485/ [2] https://aur.archlinux.org/pkgbase/kygekteampmmp4/
Request #37953 has been Accepted by blakkheim [1]: The domain used in this package (kygekteam.org) has expired, and the package does not provide integrity checks. [1] https://aur.archlinux.org/account/blakkheim/
participants (1)
-
notify@aur.archlinux.org