Some AUR packages were uploaded containing malware (2025-07-18)

Apparently there were a few more:

  • minecraft-cracked
  • ttf-ms-fonts-all
  • vesktop-bin-patched
  • ttf-all-ms-fonts

Update: The AUR packages are now all deleted and the user is permanently suspended. It appears the related GitHub and Reddit accounts are now deleted as well.

7 Likes