someone injected some malware into the AUR recently also.
just gotta be careful where it matters to you. idk about you but every time i sign up for some new website i brace myself for endless newsletter spam and the potential for yet another honeypot for hackers to sell on the dark web. it's a jungle out there. stay strapped or get clapped.