Still pretty new and definitely casual user here.
I read about the AUR malware situation after coming home from a long shift yesterday and, despite to my knowledge never having used the AUR, got spooked nonetheless and decided to check, because I had ‘manuskript’ installed, a package also affected by the recent malware attack, and it got listed as a foreign package under ‘-qm’
The installation log reads as follows:
‘grep ‘manuskript’ /var/log/pacman.log’
[2025-09-25T10:54:23+0200] [PACMAN] Running ‘/usr/bin/pacman -S --noconfirm extra/manuskript’
[2025-09-25T10:54:27+0200] [ALPM] installed manuskript (0.17.0-2)
[2025-09-25T10:57:37+0200] [PACMAN] Running pacman -Rns manuskript
[2025-09-25T10:57:50+0200] [ALPM] removed manuskript (0.17.0-2)
[2025-09-29T11:03:10+0200] [PACMAN] Running pacman -S manuskript
[2025-09-29T11:03:15+0200] [ALPM] installed manuskript (0.17.0-2)’
where I installed, didn’t like, and subsequently removed the package & then, a couple of days later, gave it another try. Then finally I removed the package another time yesterday:
‘[2026-06-12T19:47:13+0200] [PACMAN] Running pacman -Rns manuskript
[2026-06-12T19:47:28+0200] [ALPM] removed manuskript (0.17.0-2)’
Now, if I understand the log correctly, I originally installed (and reinstalled) the package from the extra-repository, not the AUR. There is no log entry regarding any upgrade to the package. Why does it show up as a foreign package then? It’s not the case with other packages installed from that repository (e.g. Obsidian).
A redditor pointed out that manuskript is not in the extra repository, although I find it unlikely that I installed it from another source. Does that only mean, it got pulled in the meantime & since it’s not there anymore, it is listed as foreign?
Thanks for reading what certainly is an absolute beginner question.