I feel like when this pops up everyone freaks out and yells about how it’s proof the aur sucks and arch is doomed. Do you people randomly install GitHub repos without any due diligence? Do you click on random ads to download bake bean can cursors? There’s malware fuckin everywhere. Just do your due diligence and don’t get screwed. And if you do get malware, have a plan to make it irrelevant. Anyone who doesn’t do these things should in no way be using the AUR.