Hi guys,
a former package was orphaned from me but i still received the mails, so
i could watch the hacker doing its work:
Package:
https://aur.archlinux.org/packages/rakudo-star
Commit:
https://aur.archlinux.org/cgit/aur.git/commit/?h=rakudo-star&id=d4f410af667fa8f522e884665fce44072d28b78e
Hackers Account:
https://aur.archlinux.org/account/pingwin840
The Account was created on 2024-06-21 and is 2 years old!
Kind regards,
Holger
On 11/06/2026 19:47, Jonathan Grotelüschen wrote:
Hi everyone,
we’re working hard to reset/delete all malicious commits and ban the
accounts.
If you find more malicious packages, please **send them as a reply to
this email** to keep them all in one thread.
Thanks!
--
tippfehlr
