dub bad, aur hack edition

[monkyyy]

https://github.com/lenucksi/aur-malware-check/blob/a03038980a2fd93b42a9630df44ce78533d938b4/package_list.txt#L298

https://lunduke.substack.com/p/rust-based-malware-hits-14-of-arch

so, fun fact, the npm clone did the npm things. If you used dub 
in the past few days maybe you should nuke your system.

If `dub-git 1.11.0.alpha.1.r11.2cbab87-1` is out of date, maybe 
it should just be deleted