@archlinux@fosstodon.org is there an archive of the PKGBUILD and distributed binary files of the packages so that post-mortem analysis of the attack can be done? I assume all public downloads of the affected packages have been removed so that people don't install the malware by accident.