Hi,

Those two packages were affected and have already been reverted to the
safe version. The user account has already banned as far as I know.

https://github.com/archlinux/aur/activity?ref=sex  
https://github.com/archlinux/aur/activity?ref=lyvi-git


The packages are also listed here in the official list of affected (and
fixed) packages. [1]
I generated my own list [2] from the github activity logs and found 
~120 more packages that were force-pushed (i.e. had some commits removed). 
All the packages in the official list (and my list) have been restored
to the safe version as far as I know.

[1]: https://md.archlinux.org/s/SxbqukK6IA
[2]: https://paste.c-net.org/GreaterInfect

--
Andy

(sorry, used the wrong mail address, sending again to the list)

Am 12.06.26 um 17:07 schrieb Storm Dragon:
> I got notifications these 2 package have been adopted. I took a look at the 
> page to see if dependencies have been changed and didn't noticed anything 
> different, so probably safe, but with everything going on currently, if 
> someone else wouldn't mind taking a look to verify that would be great.
>
> https://aur.archlinux.org/pkgbase/sex/
>
> https://aur.archlinux.org/pkgbase/lyvi-git/


Reply via email to