OrPudding [1] filed a deletion request for astro-box [2]: Original submitter (OrPudding) here.
Upstream AstroBox v1 has reached end-of-life and is no longer maintained by AstralSightStudios. The official successor is AstroBox-NG (v2), already packaged as `astrobox-ng` in AUR. This package was orphaned after v1 EOL, subsequently adopted by ditapavlikova / Antiz, and was listed among the malicious packages in the July 2026 AUR supply-chain attack wave (alongside i915-sriov-dkms, rtk-git, warp-terminal-git, weather-display, etc.). While the malicious commits appear to have been reverted by TUs, the package remains a security liability and source of user confusion. Requesting deletion to prevent users from installing an unmaintained, superseded package with a compromised maintenance history. The successor `astrobox-ng` is actively maintained. [1] https://aur.archlinux.org/account/OrPudding/ [2] https://aur.archlinux.org/pkgbase/astro-box/
