Pot plant was and is busy, but was aware of the AUR hack issue.

Pot plant notice that all packages that were compromised were the orphans ones.

Pot plant happy, plants doesn't use orphan packages and always read PKGBUILD, or diffs of it. If plants saw something strange in the diff equals to  pot plant checking full PKGBUILD.

Pot plant talks like Yoda because is tired, really tired :C , but wants to check if the computer is not with something wrong on it.

Pot plant read all of this post https://bbs.archlinux.org/viewtopic.php?id=313892 . Took a while, wanna post on it but was tired and busy and was unable to make  questions, but was aware of the issue in the background.

Pot plant found this: https://md.archlinux.org/s/SxbqukK6IA Also Seth sent it in the previous thread linked. [ Is this the updated version of the packages compromised ?]

Pot plant checked if by some reason his browser made by the creator of java script was on the list. it doesn't. But found some android ones:

android-backup-extractor
android-docs
android-google-play-apk-expansion
android-google-play-licensing
androidscreencast-bin
android-signapk
android-signapk-gui
android-support-repository

Pot plant was force to program in android, have some android tools, but none of those are on the compromised list:

Pot plant android packages: 

android-emulator 36.5.11-1
android-sdk-cmdline-tools-latest 20.0-1
android-sdk-platform-tools 37.0.0-1

Those pacakges are in the android arch wiki btw !

Pot plant doesn't remember if those packages used some dependencies of the ones that are compromised during the installation process. Doesn't seems to be, but he hasn't checked the PKGBUILDS of his pacakges now, he is so tired and busy that just stopped to update packages since the incident, but his intuition said to him that those packages are not in the ones that the kingdom of pot plants uses to develop android applications.

Pot plant ask help for it, just to be sure that his AUR packages are not linked in any sense with the ones compromised.

Pot plant just updated Java script browser when the incident happened.

Pot plant is tired and now is going to take a nap. Is not going to talk liike Yoda after the nap by the way.

Thanks for the help in advance ^^

Last edited by Succulent of your garden (Today 18:00:58)

str( @soyg ) == str( @potplant ) btw!

Also now with avatar logo included!