New comment by ailiop-git on void-packages repository https://github.com/void-linux/void-packages/pull/18823#issuecomment-583852130 Comment: > @ailiop-git this is not simple as it sounds. If a checksum changed could mean malware, be careful Totally agree (plus sourceforge has a history with malware..), which is why I'm trying to get rid of the pkg altogether. Unfortunately I haven't kept the previous two tarballs from the same release that changed cksums, in order to run a diff. I'll try to ping the upstream author anyway to see if he's aware.