Arch Linux 
Active AUR malicious packages incident
https://archlinux.org/news/active-aur-malicious-packages-incident/
Zuru (he/him)@archlinux Thanks for letting us know. It would be good to have a live malicious package list to check on our side if a package was already installed. 👀
Matt Mascarenhas@zuru @archlinux Yeah, in case you're still looking, there's this collection of info here: https://github.com/lenucksi/aur-malware-check
I didn't actually pull all this and run aur_check-v2.sh, myself, but just ran the one-liner `comm` command given in this gist: https://gist.github.com/quantenProjects/3f768dce7331618310f016d975bf8547
That threw up one package for me, gdl, installed last year, built by @heftig so evidently from the days when it was in the main repos and also depended upon by another package.
@miblo @archlinux @heftig Thanks a lot! At the end I checked manually, but that repo looks very useful and I was about to turn on another PC that uses Manjaro, so I'll be checking it. 🙏
@zuru @archlinux @heftig You're welcome! Nice one checking manually.
Yeah, just after replying, I spotted the gist only accounts for that first 480 packages. But we can simply swap out the curl URL for https://raw.githubusercontent.com/lenucksi/aur-malware-check/refs/heads/master/package_list.txt to get the current ~1600 long list.