billGate48 [1] filed a deletion request for vital-synth [2]: sha512sum doesn't match official file. It's free (beer) software, and the official license doesn't seem to make this illegal, but if the files are different this could be malicious
[1] https://aur.archlinux.org/account/billGate48/ [2] https://aur.archlinux.org/pkgbase/vital-synth/