Re: [SECURITY] Possibly malicious AUR package: nodejs-pkg

[Aaron Liu]

I would say it's a failed test case. Per https://wiki.archlinux.org/title/Node.js_package_guidelines this is just how npm packages should be packaged.

--
Cheers,
Aᴀʀᴏɴ

OpenPGP_0xCBC3973CD9FC6A16.asc
Description: OpenPGP public key

OpenPGP_signature.asc
Description: OpenPGP digital signature