Firstpick [1] filed a deletion request for accel-ppp [2]: Malicious commit 60daaf5f15c1 adds an executable named formatter and invokes it via sudo during build(). The binary matches a coordinated AUR malware campaign (SHA-256: e73a35b3e75e94746428d1a207703d6335933deadee7d1d9c9d0328df7b9df77) and contains Tor C2/downloader and persistence functionality. Last known clean commit: 9115ab584760.
[1] https://aur.archlinux.org/account/Firstpick/ [2] https://aur.archlinux.org/pkgbase/accel-ppp/
