Someone made a website to compile them you might find, but here’s what I remember:

• Putting the extraordinarily unstable test release of a package in their normal release. That package specifically included disclaimers that it was for testing only, not meant for any users, and it was very clearly not meant for general release for unsuspecting end-users.

• Getting banned off the AUR (twice?) for DDOS-ing it due to their faulty code. As I recall, every machine queried the AUR for updates constantly, or something like that.

• Breaking AUR dependencies because of holding back releases for a few weeks, which they regularly to improve safety. Basically, don’t use AUR on Manjaro.