This just checks if the package is installed, not if the installed version is infected. Presumably, if you (me...) haven't run `yay -Syu` in a while (months), we're fine, right? ...Right?
Goddamit, don't make me reinstall Arch, took me a week last time.