Hi Andrea,
I don't know if this is the best address to write to, but I wanted to point out that I found some suspicious AURs.
None of these PKGBUILDs exist on the AUR. These are all packages on the [extra] repository. The PKGBUILDs are all curated and maintained by long-time, established, trusted maintainers, who also build and sign the packages. How do you think the PKGBUILDs are suspicious?They are as follows: * breeze-icons 6.27.0-1 * icoextract o.3.0-1 * kiconthemes 6.27.0-1 * oxygen-icons 1:6.27.0-1 * oxygen-icons-svg 1:6.27.0-1
For future reports, unless the issue is blatantly obvious, please include a short description as to what exactly you feel would be an indicator of compromise. This is important to avoid spreading FUD.
Thanks! Regards Claudia
OpenPGP_0xD11E9FC4F7C9DA3C.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature
