I think, the "btdu" AUR package has been compromised with the last commit.
https://aur.archlinux.org/packages/btdu
Similar to this:
https://bbs.archlinux.org/viewtopic.php?id=309861
Trying to escalate, but sending to "[email protected]" was rejected.