joren485 [1] filed a deletion request for kygekteampmmp4 [2]:

The domain used in this package (kygekteam.org) has expired, and the
package does not provide integrity checks. This means that this
package is vulnerable to a potential hijack, where a malicious actor
can register the domain and host arbitrary files instead of the valid
installation files.

Full disclosure: to test out this theory is correct, I temporarily
registered the domain. I tried to reach out to the previous owners of
the domain, but was unable to reach them.

[1] https://aur.archlinux.org/account/joren485/
[2] https://aur.archlinux.org/pkgbase/kygekteampmmp4/

Reply via email to