It’s still hosted on archlinux.org.

However “YMMV” the scripts are intended to be, they can’t host throngs of malware on their domain.

…Well, I guess they could if they want to become the next npm, but it still seems like a legal liability.

I’m not saying it should be taken down, but the status quo is definitely no longer acceptable.