Re: Malicious package - hyprland-fixes

[progandy]

Am 29.08.26 um 11:55 schrieb Claudia Pellegrino:
> The only alternative would be deleting the package. But that would
> bite other contributors, possibly years later, when they check out the
> tree in an attempt to create a PKGBUILD, get served the malicious tip
> of the tree, find out there’s prior work, don’t see the malicious
> line, and run makepkg to see if the old version still works.
>
> That’s why we overwrite history instead.
>
Previously it was done this way which is why e.g. gentor and
firefox-browser-bin still exist in the AUR git repository even though
they were deleted from the AUR database.