@lina @luithe I thought this has only happened in AUR and npm? Distros don't audit these packages, you need to do it yourself. If the attack came from an official repo it'd be a good reason to never use it again.