miniongg has had a suspicious update:
```
+post_install() {{
+ cd /tmp
+ bun add minimist js-digest
+}}
```
See:
https://aur.archlinux.org/cgit/aur.git/commit/?h=miniongg&id=58250f380c60f31b72805767e80c89043fbd16a4
ttf-mutant-emoji even overwrites my identity
See:
https://aur.archlinux.org/cgit/aur.git/commit/?h=ttf-mutant-emoji&id=530ea14f606348d90df0d040b44009b3af801d1a
ttf-mutant-emoji: https://aur.archlinux.org/packages/ttf-mutant-emoji
miniongg: https://aur.archlinux.org/packages/miniongg
--
txtsd
https://ihavea.quest
On 6/11/26 11:17 PM, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the
accounts.
If you find more malicious packages, please **send them as a reply to
this email** to keep them all in one thread.
Thanks!
--
tippfehlr
