Surprised it took this long to happen.
Removed by mod
Package installation checker
https://github.com/lenucksi/aur-malware-check
With this cool one-liner to check
comm -1 -2 <(pacman -Qq | sort) <(curl -s https://raw.githubusercontent.com/YOUR/aur-malware-check/main/package_list.txt | sort)Is the checker also malware?
For people that just want to install packages that are not included in the Arch distro, and don’t have the knowledge or time to review PKGBUILD files:
Have a look into the Guix package manager. It works fine on top of Arch, and Guix has 31,000 packages now. Great for cross-language development and also suitable for early sharing of projects. npm support is a bit weak though, but packages written in Python, Rust, or functional languages are well represented.
