I'm not a package maintainer, but I will paraphrase to the best of my memory what a package maintainer said before.
They remove the malware from the git history so that no one is able to accidentally stumble upon it and infect their PC. Best, User8395 https://proton.me/mail/home -------- Original Message -------- On Friday, 08/28/26 at 23:43 Sam K <[email protected]> wrote: > Malicious package histories are always removed. There is no way I am aware of > to examine malicious PKGBUILDs that have been identified and removed. > > I am not sure why exactly this is. Perhaps a package maintainer could clarify > why overwriting history is SOP. > > Sam
