deepin-wine-mcloud
LOW
maintainer zxp19821005
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a .deb from a Deepin-related domain and an official .exe installer from the vendor's domain; both are legitimate sources for repackaging, and no untrusted or obfuscated code execution occurs.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a .deb from a Deepin-related domain and an official .exe installer from the vendor's domain; both are legitimate sources for repackaging, and no untrusted or obfuscated code execution occurs.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
"${_officalname}-${pkgver}.exe::https://yun.mcloud.139.com/${_officalname}Pc/v8010/${_officalname}_Setup-001.exe" -
PKGBUILD:26
"LICENSE.html::https://caiyun.feixin.10086.cn:7071/portal/templateView/initve.html?id=145&marketName=hcy_yhxy"
PKGBUILD
2 offending line(s) highlighted
1
# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2
pkgname=deepin-wine-mcloud
3
_pkgname=com.139.yun.deepin
4
_officalname=mCloud
5
pkgver=8.0.1
6
_deepinver=7.2.0deepin2
7
_deepinurl=https://com-store-packages.uniontech.com
8
pkgrel=3
9
pkgdesc="CMCC 139 client on Deepin Wine 6.中国移动云盘 on Deepin Wine 6"
10
arch=("x86_64")
11
url="https://yun.139.com/"
12
license=('LicenseRef-custom')
13
conflicts=("mcloud")
14
depends=(
15
'deepin-wine6-stable'
16
'xdg-utils'
17
'deepin-wine-helper'
18
)
19
makedepends=(
20
'p7zip'
21
)
22
install="${pkgname}.install"
23
source=(
24
"${_pkgname}_${_deepinver}_i386.deb::${_deepinurl}/appstore/pool/appstore/c/${_pkgname}/${_pkgname}_${_deepinver}_i386.deb"
25
"${_officalname}-${pkgver}.exe::https://yun.mcloud.139.com/${_officalname}Pc/v8010/${_officalname}_Setup-001.exe"
26
"LICENSE.html::https://caiyun.feixin.10086.cn:7071/portal/templateView/initve.html?id=145&marketName=hcy_yhxy"
27
"${pkgname}.sh"
28
)
29
sha256sums=('ecc41143f5c0a96f17236e2f7a4c1e79eb601d1129674d89ea360999a93c6dcb'
30
'ea2555db5087be3419ec898da58157b07305f25fa0499ef4f1fdfcb4c9bebbbb'
31
'e53db97fd17c2d3b799d5f97801a71f27ba8c45133645d4eb424a3a9067b681e'
32
'4c549967da523dc6bbb551df00ca06f0000438c8f7f967318dda40b8390f2f20')
33
build() {
34
sed -e "s|@bottomname@|${_officalname}|g" \
35
-e "s|@appname@|${pkgname}|g" \
36
-e "s|@appver@|${pkgver}|g" \
37
-i "${srcdir}/${pkgname}.sh"
38
bsdtar -xf "${srcdir}/data."*
39
mv "${srcdir}/opt/apps/${_pkgname}" "${srcdir}/opt/apps/${pkgname}"
40
mkdir -p "${srcdir}/tmp" "${srcdir}/extracted_exe"
41
msg "Extracting Deepin Wine ${_officalname} archive ..."
42
bsdtar -xf "${srcdir}/opt/apps/${pkgname}/files/files.7z" -C "${srcdir}/tmp"
43
msg "Extract latest ${_officalname} files to ${srcdir}/tmp/drive_c/Program Files/${_officalname}/ ..."
44
rm -r "${srcdir}/tmp/drive_c/deepin" "${srcdir}/tmp/drive_c/Program Files/Maxthon2" \
45
"${srcdir}/tmp/drive_c/yidongyunpan" \
46
"${srcdir}/tmp/drive_c/users/@current_user@/Application Data/aDrive" \
47
"${srcdir}/tmp/drive_c/users/@current_user@/Application Data/ThinkMail" \
48
"${srcdir}/tmp/drive_c/users/@current_user@/Local Settings/Application Data/Programs" \
49
"${srcdir}/tmp/drive_c/users/@current_user@/Start Menu/Programs"
50
mkdir -p "${srcdir}/tmp/drive_c/Program Files/${_officalname}"
51
7z e -aoa "${_officalname}-${pkgver}.exe" -o"${srcdir}/extracted_exe"
52
bsdtar -xf "${srcdir}/extracted_exe/app.7z" -C "${srcdir}/tmp/drive_c/Program Files/${_officalname}"
53
msg "Repackaging app archive ..."
54
rm -r "${srcdir}/opt/apps/${pkgname}/files/files.7z" "${srcdir}/opt/apps/${pkgname}/info"
55
7z a -t7z -r -snl -snh "${srcdir}/opt/apps/${pkgname}/files/files.7z" "${srcdir}/tmp/*"
56
sed "s|${_pkgname}|${pkgname}|g;s|internet|Network|g" -i "${srcdir}/opt/apps/${pkgname}/entries/applications/${_pkgname}.desktop"
57
}
58
package() {
59
install -Dm755 "${srcdir}/${pkgname}.sh" "${pkgdir}/usr/bin/${pkgname}"
60
cp -r "${srcdir}/opt" "${pkgdir}"
61
md5sum "${srcdir}/opt/apps/${pkgname}/files/files.7z" | awk '{ print $1 }' > "${pkgdir}/opt/apps/${pkgname}/files/files.md5sum"
62
for _icons in 16x16 32x32 64x64;do
63
install -Dm644 "${srcdir}/opt/apps/${pkgname}/entries/icons/hicolor/${_icons}/apps/${_pkgname}.png" \
64
"${pkgdir}/usr/share/icons/hicolor/${_icons}/apps/${pkgname}.png"
65
done
66
install -Dm644 "${srcdir}/opt/apps/${pkgname}/entries/applications/${_pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
67
install -Dm644 "${srcdir}/LICENSE.html" -t "${pkgdir}/usr/share/licenses/${pkgname}"
68
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |