Re: [aur-general] AUR malware campaign, June 2026 (atomic-lockfile / lockfile-js / nextfile-js)

[Keon Cachia]

Is there a particular reason why this script only checks for JS package
managers? I am aware they are the most common when it comes to malicious
packages but, it was easy for me to add others such as Composer and
Cargo.

Keon Cachia