These two look non-malicious to me. At the very least they don't fit the pattern of the current bun compaign.
On Fri, Jun 12, 2026, 11:45 AM Storm Dragon <[email protected]> wrote: > Howdy, > > > On 6/11/26 19:47, Jonathan Grotelüschen wrote: > > > Hi everyone, > > > > > > we’re working hard to reset/delete all malicious commits and ban the > > > accounts. > > > > > > If you find more malicious packages, please **send them as a reply > to > > > this email** to keep them all in one thread. > > > > I got notifications these 2 package have been adopted. I took a look at > the page to see if dependencies have been changed and didn't noticed > anything different, so probably safe, but with everything going on > currently, if someone else wouldn't mind taking a look to verify that would > be great. > > https://aur.archlinux.org/pkgbase/sex/ > > https://aur.archlinux.org/pkgbase/lyvi-git/ >
