Post #3352240

In example if you don't use the AUR at all, or the packages you installed are not affected. In example the packages from the AUR I have installed have no such changes that could affect me from this malicious attack. Also if the packages you have are not updated in the last couple of days (or weeks) and are not even orphaned packages, then it is unlikely that you are affected by this attack. I am not talking of specific packages only, but a systematic logic you can follow. The script https://github.com/lenucksi/aur-malware-check does a good job and not just check for known infected packages.