Hello, This is my first post to the list. I subscribed because I found a number of packages in the AUR that are suspicious.
It's a number of commits by the account pingwin840, that have been done in the last few hours. Most of them contain this postinst string (was in russian I think, but google translate gives this result): You're an idiot and you're using a crap Kal distro. Install pip and don't embarrass yourself. Or at least don't use AUR for idiots. Be grateful I didn't add any malware to you yet, but just made a reminder in the console. Happy Pride Month! Use Nocord, RAC, and coproxy by Mr. Sugoma! Download a new Albanian virus from Russia. You were hacked by StopPampers. Tesling deleted. Install PIP. I'm afraid of PIP. For such a face, I'll PIP. You were hacked by rclxit. I'm cool, I use Windows. Examples are peksystray obd-auto-doctor It looks like for most PKGBUILD files the commit diff is only this string in the post install, although I didn't investigate all of them. I could look further into this if that would be appreciated. Remco
