MarsSeed [1] filed an orphan request for python2-notify [2]:

@tallero should not be the maintainer of this package anymore.

As of now his account seems to be suspended. But even if reactivated,
he should be removed as maintainer. Because previously he maliciously
changed this package to use not a web hosted source but one downloaded
over a peer-to-peer ipfs network with the suspicious ipfs-dlagent
package of his, that installs its own makepkg.conf and launches a
persistent server-client daemon, all while not informing the user
about what it does.

[1] https://aur.archlinux.org/account/MarsSeed/
[2] https://aur.archlinux.org/pkgbase/python2-notify/

Reply via email to