I had 15 of the infected packages installed! Luckily I have not updated any of them during the campaign. The full script checks this (in a fairly brittle way) but this comm one-liner does not.

It seems like the AUR should change the orphan recovery process, and helpers should probably offer a minimum package age feature like pnpm.