История изменений

Ну так и написано:

I’m surprised that this type of silly package takeover and malware introduction doesn’t happen more often.

This is why we insist users always download the PKGBUILD from the AUR, inspect it and build it themselves. Helpers that do everything automatically and users that don’t pay attention, *will* have issues. You should use helpers even more so at your risk than the AUR itself.

Что ж, арч становится популярней. Ещё лет пяток назад (а может и меньше) даже пакеты в основных репах не подписывались, обходились md5.

Ну так и написано:

I’m surprised that this type of silly package takeover and malware introduction doesn’t happen more often.

This is why we insist users always download the PKGBUILD from the AUR, inspect it and build it themselves. Helpers that do everything automatically and users that don’t pay attention, *will* have issues. You should use helpers even more so at your risk than the AUR itself.