In case you’re as lazy as I am w.r.t. cleaning your pacman cache, this gives you a list of packages with sus hooks:

```
find /var/cache/pacman -type f -not -name \*.sig | while read -r pkg; do tar tf "$pkg" | grep -qE '\.INSTALL$' && tar xOf "$pkg" '.INSTALL' | grep -qE 'bun add|(npm|deno|pip) install' && echo "$pkg"; done
```

Note: This is worthless if you ran pacman -Sc since the first AUR package was compromised.