>Per the Wayback Machine the username used was danikpapas. As far as Google and duckduckgo know these are the only packages theat username ever uploaded.

I mean... ... if this was a malicious actor who is to say they don't have 15 aliases on 5 linux distros