[matthewbauer]

Be warned that malware like this is in the AUR all the time. It's so common it's not even newsworthy. They are usually pretty good at handling it though.

[pierrec]

I've never heard of this happening and I can't find a single occurrence of it. I mean, I agree with "don't blindly trust everything in the AUR", but this seems wrong.

[nerflad]

I maintain 14 AUR packages and have also never heard of this happening.

[atomicnumber1]

Also, the aur community seems to be very active.

[voltagex_]

Any sources/articles for this?

[michaelmrose]

citation needed