On Thu, Jun 11, 2026 at 07:47:05PM +0200, Jonathan Grotelüschen wrote: > Hi everyone, > > we’re working hard to reset/delete all malicious commits and ban the > accounts. > > If you find more malicious packages, please **send them as a reply to this > email** to keep them all in one thread. > > Thanks! >
here we go again, now with obfuscated code: $ git log --all -S "'b''u''n'" --since="3 hours ago" --oneline af09b1cf1b59 (python-django-js-asset) Update dependencies (python-django-js-asset) fc1686472116 (puppy-browser) Add missing deps (puppy-browser) a5770512c0a0 (privacy-redirect-git) add deps ad43b9d36fb0 (playhouse-git) rebuild dee42adb1d4a (plasma6-applets-fancytasks) updpkgsums (plasma6-applets-fancytasks) 18e160e4af66 (openlayers) upgpkg 77e940aca52d (npm-accel) add deps (npm-accel) 9f78f86d315b (nodejs-vim-debugger) updpkgsums a939ae0b94fa (nodejs-ws) Fix deps 2f45cba74d0e (nodejs-qunit) upgpkg (nodejs-qunit) ae9efc2316e2 (nodejs-sweet) Fix build 2b0281471e67 (nodejs-pkg) Fix source d8ec8d1b1667 (nodejs-nodemailer) Fix build (nodejs-nodemailer) 97423ad53ffc (nodejs-jsfmt) sync 8ecc4763ae6e (nodejs-json-to-js) Fix build (nodejs-json-to-js) 8c8777cb6efd (nodejs-jscs) add deps def9a9c26f6d (nodejs-dicy-cli) Update source 520509753f52 (nodejs-browser-sync) Fix deps (nodejs-browser-sync) 50e70f41e533 (nitrogen-git) Fix install (nitrogen-git) 51f1f31c00fc (nem-wallet) Bump pkgrel b0620ca63777 (neovim-telescope-file-browser-git) add deps fd7c2046c370 (nanocurrency) Update PKGBUILD 8b08ce7e00be (librewolf-extension-vimiumc-bin) Fix install dd99ef59434f (librewolf-extension-protonpass-bin) updpkgsums 5b92cb26426c (kmorph) Update dependencies (kmorph) 5efa44bdde97 (kibana6) Fix build 02262d4c0ca9 (just-js) updpkgsums ff8e6c657a41 (kcmlaptop) Update source (kcmlaptop) 71061a13a17d (iceweasel) Fix build 7c3118898b73 (hudkit-wayland) Fix build (hudkit-wayland) 191ddf65e033 (hack-browser-data-git) Add missing deps 015d37ebcdf4 (gjs-git) sync 81136bdeb450 (fontfinder) sync cce5fff63f88 (firefox-floccus) sync (firefox-floccus) fe04bb990a35 (firefox-esr-noscript) rebuild 370d6ff5f5df (felida-bin) Fix deps 5ae118ed955e (edfbrowser-git) add deps ac14770e3b30 (deno-git) Bump pkgrel f9b91f5436dc (ctjs-bin) sync 3cbb060789e8 (concordium-desktop-wallet-testnet-bin) Fix build 3d477e3acbdc (cl-javascript) upgpkg e08dd6e54f27 (cl-parse-js) Fix source a82d32cd30a0 (claymore-miner-bin) rebuild 5f88b6813f74 (cl-parenscript) Fix install (cl-parenscript) 9441cefa807b (chia-git) Fix install 17870c40e170 (certbox-bin) Fix source 656ebbc409a9 (catalyst5-browser) Update source 525431fabeea (btdex-git) updpkgsums (btdex-git) 1e52b3bc3e06 Fix build 065f7bbc0b4c (algorand-devtools-bin) Fix source bb5741e96690 (beaker-browser-git) Update PKGBUILD (beaker-browser-git) b3cc85a2a3e3 (aura-browser) Update dependencies ebf8ba97fc88 (amfora-favicons-git) updpkg (amfora-favicons-git) 855e58cf9dff (atto-bin) upgpkg
