xilophor

tbh I do feel like it’s somewhat relevant in this case since the packages that were compromised on the AUR were due to the AUR’s package transfer ability for unmaintained packages