dub bad, aur hack edition

[Kapendev]

On Sunday, 14 June 2026 at 05:34:26 UTC, monkyyy wrote:
> https://github.com/lenucksi/aur-malware-check/blob/a03038980a2fd93b42a9630df44ce78533d938b4/package_list.txt#L298
>
> https://lunduke.substack.com/p/rust-based-malware-hits-14-of-arch
>
> so, fun fact, the npm clone did the npm things. If you used dub 
> in the past few days maybe you should nuke your system.
>
> If `dub-git 1.11.0.alpha.1.r11.2cbab87-1` is out of date, maybe 
> it should just be deleted

Um, actually, this is an AUR issue and not a DUB issue.
If you used Arch in the past few days maybe you should nuke your 
system.

But, but... I can see how this can be a problem for DUB too.
AUR and NPM are not special or anything.