A former package of mine was just adopted and is malicious: https://aur.archlinux.org/packages/xspin
Same for all the packages of the user: https://aur.archlinux.org/packages?K=melindajuhasz&SeB=m Could you not completely turn off adoption until this is sorted out? -- Pierre Chapuis On Thu, Jun 11, 2026, at 19:47, Jonathan Grotelüschen wrote: > Hi everyone, > > we’re working hard to reset/delete all malicious commits and ban the > accounts. > > If you find more malicious packages, please **send them as a reply to > this email** to keep them all in one thread. > > Thanks! > > -- > tippfehlr > > Attachments: > * OpenPGP_signature.asc
