dim-agent-bin

MEDIUM

maintainer czyt 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package installs a prebuilt .deb binary from a non-standard, project-specific domain (dimcode.echooai.com), which is not a widely recognized or official distribution channel, creating a supply-chain risk if the host is compromised or malicious.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:27 source=("DimAgent-${pkgver}.deb::https://dimcode.echooai.com/updates/stable/linux/x64/DimAgent-${pkgver}.deb")

Medium AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 90%): The package installs a prebuilt .deb binary from a non-standard, project-specific domain (dimcode.echooai.com), which is not a widely recognized or official distribution channel, creating a supply-chain risk if the host is compromised or malicious.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: czyt <czytcn@gmail.com>
    
      2pkgname=dim-agent-bin
    
      3pkgver=0.9.55
    
      4pkgrel=1
    
      5pkgdesc='Agent runtime for desktop, terminal, scripts, and editors'
    
      6arch=('x86_64')
    
      7url='https://dimagent.com'
    
      8license=('custom')
    
      9depends=(
    
      10  'gtk3'
    
      11  'libnotify'
    
      12  'libxss'
    
      13  'libxtst'
    
      14  'xdg-utils'
    
      15  'at-spi2-core'
    
      16  'util-linux-libs'
    
      17  'libsecret'
    
      18  'libxi'
    
      19  'glib2'
    
      20  'gdk-pixbuf2'
    
      21  'libxcb'
    
      22)
    
      23optdepends=('libappindicator-gtk3: system tray indicator support')
    
      24options=('!debug' '!strip')
    
      25provides=('dimagent')
    
      26conflicts=('dimagent')
    
      27source=("DimAgent-${pkgver}.deb::https://dimcode.echooai.com/updates/stable/linux/x64/DimAgent-${pkgver}.deb")
    
      28noextract=("DimAgent-${pkgver}.deb")
    
      29sha256sums=('64fbc98e27010356c24c7f730ce158091d6416165203be2a2e58205f919408e9')
    
      30
    
      31package() {
    
      32  local data_member
    
      33  data_member=$(ar t "${srcdir}/DimAgent-${pkgver}.deb" | awk '/^data\.tar\.(gz|bz2|xz|zst|lz4|lzma)$/ { print; exit }')
    
      34  [[ -n "${data_member}" ]] || {
    
      35    echo 'Could not find a supported data archive in the Debian package' >&2
    
      36    return 1
    
      37  }
    
      38
    
      39  ar p "${srcdir}/DimAgent-${pkgver}.deb" "${data_member}" |
    
      40  bsdtar -xf - -C "${pkgdir}"
    
      41  install -dm755 "${pkgdir}/usr/bin"
    
      42  ln -s /opt/DimAgent/DimAgent "${pkgdir}/usr/bin/dimagent"
    
      43  chmod -R u=rwX,go=rX "${pkgdir}"
    
      44}
    
      45

Changes since previous scan

--- PKGBUILD @ 2026-10-16 00:12
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,6 +1,6 @@
 # Maintainer: czyt <czytcn@gmail.com>
 pkgname=dim-agent-bin
-pkgver=0.9.53
+pkgver=0.9.55
 pkgrel=1
 pkgdesc='Agent runtime for desktop, terminal, scripts, and editors'
 arch=('x86_64')
@@ -26,7 +26,7 @@
 conflicts=('dimagent')
 source=("DimAgent-${pkgver}.deb::https://dimcode.echooai.com/updates/stable/linux/x64/DimAgent-${pkgver}.deb")
 noextract=("DimAgent-${pkgver}.deb")
-sha256sums=('b37f3ae27b3f75cfccf2c0795c1ee26a86e94012a0f72c77145ac1a6c49ead83')
+sha256sums=('64fbc98e27010356c24c7f730ce158091d6416165203be2a2e58205f919408e9')
 
 package() {
   local data_member

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Medium	2
2026-10-16 17:16:11	Medium	2
2026-10-16 00:12:47	Medium	2
2026-10-15 00:28:05	Medium	2
2026-10-14 17:20:19	Medium	2
2026-10-14 00:06:47	Medium	2
2026-10-13 00:23:45	Medium	2
2026-10-12 21:14:41	Medium	2
2026-10-12 00:18:51	Medium	2
2026-10-11 00:26:05	Medium	2
2026-10-10 00:11:52	Medium	2
2026-10-09 00:05:33	Medium	2
2026-10-08 00:28:03	Medium	2
2026-10-07 00:21:34	Medium	2
2026-10-06 00:13:36	Medium	2
2026-10-05 23:40:58	Medium	1
2026-10-05 00:08:03	Medium	2
2026-10-04 00:18:08	Medium	2
2026-10-03 00:23:04	Medium	2
2026-10-02 00:00:32	Medium	2