Self-host Navidrome. Choose any of the clients that you like. Pirate stuff from big bands, buy stuff from smaller bands.
Cons: You’d have to deal with storage and hosting and access from outside your house e.g. with Tailscale. You’d also have to tag incorrectly tagged songs (surprisingly common issue, sometimes pirates tag stuff better than the bands themselves)
The script in the top post of this thread does a better job, since it actually checks when you have upgraded the affected packages: https://discuss.cachyos.org/t/aur-compromised-1500-packages-affected-20260611/31040
There’s also an even more thorough https://github.com/lenucksi/aur-malware-check
same. I’ll use vi if there’s nothing else available, but I default to nano if I can
I wish I could say I was surprised
did he send buttplug pics tho