cheatbreaker
MEDIUM
maintainer ShonP40
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt AppImage from a non-whitelisted, project-specific host (r2.cheatbreaker.net), which is an unverifiable executable artifact that could be silently replaced with malicious code; however, it is part of the official project's distribution infrastructure, reducing likelihood of third-party compromise.
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:12
source_x86_64=("${_pkgname}-${pkgver}-x86_64.AppImage::https://r2.cheatbreaker.net/Launcher/master/Linux/amd64/CheatBreaker.AppImage")
Medium
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 95%): The package downloads a prebuilt AppImage from a non-whitelisted, project-specific host (r2.cheatbreaker.net), which is an unverifiable executable artifact that could be silently replaced with malicious code; however, it is part of the official project's distribution infrastructure, reducing likelihood of third-party compromise.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: AUR@cheatbreaker.net
2
3
pkgname=cheatbreaker
4
_pkgname=cheatbreaker
5
pkgver=2026.9.1
6
pkgrel=1
7
pkgdesc='CheatBreaker is a modpack and FPS booster combined! In most cases, CheatBreaker more than doubles your normal Minecraft frames!'
8
url=https://cheatbreaker.net
9
arch=('x86_64' 'arm64')
10
depends=(fuse xorg-xrandr)
11
options=(!strip)
12
source_x86_64=("${_pkgname}-${pkgver}-x86_64.AppImage::https://r2.cheatbreaker.net/Launcher/master/Linux/amd64/CheatBreaker.AppImage")
13
source_arm64=("${_pkgname}-${pkgver}-arm64.AppImage::https://r2.cheatbreaker.net/Launcher/master/Linux/arm64/CheatBreaker-ARM64.AppImage")
14
md5sums_x86_64=('06461aac1e2c44092967069275186288')
15
md5sums_arm64=('37eda89039a0fcb22231c8bc81827840')
16
17
prepare() {
18
if [ "${CARCH}" == 'arm64' ]; then
19
_appimage="${_pkgname}-${pkgver}-arm64.AppImage"
20
else
21
_appimage="${_pkgname}-${pkgver}-x86_64.AppImage"
22
fi
23
chmod +x "${_appimage}"
24
./"${_appimage}" --appimage-extract
25
}
26
27
build() {
28
# Adjust .desktop so it will work outside of AppImage container
29
sed -i -E \
30
"s|Exec=AppRun|Exec=env DESKTOPINTEGRATION=false /usr/bin/${_pkgname}|" \
31
"squashfs-root/${_pkgname}.desktop"
32
# Fix permissions; .AppImage permissions are 700 for all directories
33
chmod -R a-x+rX squashfs-root/usr
34
}
35
36
package() {
37
if [ "${CARCH}" == 'arm64' ]; then
38
_appimage="${_pkgname}-${pkgver}-arm64.AppImage"
39
else
40
_appimage="${_pkgname}-${pkgver}-x86_64.AppImage"
41
fi
42
43
# AppImage
44
install -Dm755 \
45
"${srcdir}/${_appimage}" \
46
"${pkgdir}/opt/${_pkgname}/${_pkgname}.AppImage"
47
48
# Desktop file
49
install -Dm644 \
50
"${srcdir}/squashfs-root/${_pkgname}.desktop" \
51
"${pkgdir}/usr/share/applications/${_pkgname}.desktop"
52
53
# Icon images
54
install -dm755 "${pkgdir}/usr/share/"
55
cp -a \
56
"${srcdir}/squashfs-root/usr/share/icons" \
57
"${pkgdir}/usr/share/"
58
59
# Symlink executable
60
install -dm755 "${pkgdir}/usr/bin"
61
ln -s \
62
"/opt/${_pkgname}/${_pkgname}.AppImage" \
63
"${pkgdir}/usr/bin/${_pkgname}"
64
}
65
Changes since previous scan
--- PKGBUILD @ 2026-09-12 00:25+++ PKGBUILD @ 2026-09-17 00:27@@ -2,7 +2,7 @@ pkgname=cheatbreaker _pkgname=cheatbreaker-pkgver=2026.9.0+pkgver=2026.9.1 pkgrel=1 pkgdesc='CheatBreaker is a modpack and FPS booster combined! In most cases, CheatBreaker more than doubles your normal Minecraft frames!' url=https://cheatbreaker.net@@ -11,8 +11,8 @@ options=(!strip) source_x86_64=("${_pkgname}-${pkgver}-x86_64.AppImage::https://r2.cheatbreaker.net/Launcher/master/Linux/amd64/CheatBreaker.AppImage") source_arm64=("${_pkgname}-${pkgver}-arm64.AppImage::https://r2.cheatbreaker.net/Launcher/master/Linux/arm64/CheatBreaker-ARM64.AppImage")-md5sums_x86_64=('bfe0838e2b513e480765bffe2dbe93c9')-md5sums_arm64=('d148708d18d9ae1aa7b5b974bcbbfebc')+md5sums_x86_64=('06461aac1e2c44092967069275186288')+md5sums_arm64=('37eda89039a0fcb22231c8bc81827840') prepare() { if [ "${CARCH}" == 'arm64' ]; thenScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Medium | 2 |
| 2026-09-16 00:03:17 | Medium | 2 |
| 2026-09-15 00:25:31 | Medium | 2 |
| 2026-09-14 00:27:57 | Medium | 2 |
| 2026-09-13 00:19:54 | Medium | 2 |
| 2026-09-12 15:12:25 | Medium | 2 |
| 2026-09-12 00:25:17 | Medium | 2 |
| 2026-09-11 00:19:22 | Medium | 2 |
| 2026-09-10 00:22:44 | Medium | 2 |
| 2026-09-09 00:04:09 | Medium | 2 |
| 2026-09-08 00:18:08 | Medium | 2 |
| 2026-09-07 21:15:20 | Medium | 2 |
| 2026-09-07 00:30:15 | Medium | 2 |
| 2026-09-06 00:17:06 | Medium | 2 |
| 2026-09-05 00:16:27 | Medium | 2 |
| 2026-09-04 00:03:13 | Medium | 2 |
| 2026-09-03 00:15:47 | Medium | 2 |
| 2026-09-02 00:02:31 | Medium | 2 |
| 2026-09-01 00:11:19 | Medium | 2 |
| 2026-08-31 00:19:57 | Medium | 2 |