Hi, The following packages are still infected:
bili-tools-git brutefir cardamum-git caveman comodoro-git deepseek-tui-git justevery-code gesso gsimplecal-git human-mcp-git humen-mcp-bin humen-mcp-git i3-workspace-switch-git i915-sriov-dkms kickthemout-git kloak-whonix openrc-manager-gui python-drastic tuigreety-bin zsh-directory-history-git llama.cpp-ggml mimosa-git mingw-w64-vulkan-tools nimf noctyra-cli-git node-llama-cpp play-git python-etcd3 python-twopoint-git python-vxi11 rsbep-backup-git rtk-git rtv-git scenecut-extractor telegram-desktop-futpib-git tempora-bin stable-diffusion.cpp-ggml warp-terminal-dev-bin warp-terminal-git wayland-app-launcher-git weather-display astro-box Regards, Firstpick Robin Candau <[email protected]> schrieb am Freitag, 31. Juli 2026 um 01:12: > On 7/31/26 12:01 AM, Saren wrote: > > in format of <package name>/<malicious ELF binary> > > > > archutil/linter > > bigwebapp-manager/minifier > > boringssl-git/hasher > > cinnamon-no-nemo/converter > > duhh/indexer > > eden-nightly/encryptor > > garlic-decompiler-gui/checker > > gigolo-git/tagger > > gitarbor-bin/parser > > icloudpd/preprocessor > > imago-bin/generator > > juicebox-plus-git/minifier > > magic-context-dashboard-bin/validator > > option-term/indexer > > pagerduty-short-circuiter/assembler > > portless/assembler > > pylnker-git/converter > > pylnker-git/packer > > python-libipld-git/hasher > > python-numkong/compressor > > python-parallax/converter > > python-ultraplot-git/serializer > > ramses-git/indexer > > src-cli-bin/migrator > > steamidra-bin/generator > > stirling-pdf-desktop-bin/optimizer > > wiki-go/merger > > windscribe-cli-v2-bin/parser > > > > Hi, > > Thanks for the report! > > I have now handled all of those (banned the account and revert the > malicious commit). > > -- > Regards, > Robin Candau / Antiz >
