I don't know if this is the best address to write to, but I wanted to
point out that I found some suspicious AURs.
They are as follows:
* breeze-icons 6.27.0-1
* icoextract o.3.0-1
* kiconthemes 6.27.0-1
* oxygen-icons 1:6.27.0-1
* oxygen-icons-svg 1:6.27.0-1
I know these are just secondary mattresses, but I think they should be
reported anyway.
I will make a further report on Reddit where I will say that in
addition to large packages like spotify or discord, you also need to
be careful with these smaller repositories