nixpkgs has so many packets, there's no way it hasn't been hacked yet.

I wasn't affected so from my perspective the AUR is still better. 😎