eden-nightly
maintainer annabjorklund
· 1 votes
· scanned 2026-08-03 00:08:14.047287
HIGH
View on AUR ↗
Why flagged
The PKGBUILD executes `sudo "$srcdir/encryptor"` during the build() phase. This binary has no URL in the source array (it is a local file with no fetch URL), has its checksum set to SKIP, and is run with elevated privileges via sudo. There is no git clone of the eden source either (no git+https:// source entry), so the actual emulator source is also missing. The 'encryptor' binary is completely unverifiable: no upstream URL, no integrity check, executed as root. This is a textbook malware delivery pattern - a local opaque binary with SKIP checksum run with sudo. The cheaper model's assessment is correct: this is a genuine HIGH risk.
Triggered rules
MEDIUM
Recently orphaned & re-adopted
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
HIGH
AI review of an ambiguous pattern
llm_review
The static rules found a suspicious pattern they could not resolve, so an AI model (anthropic/claude-sonnet-4.6) reviewed it and judged it HIGH (confidence 95%): The PKGBUILD executes `sudo "$srcdir/encryptor"` during the build() phase. This binary has no URL in the source array (it is a local file with no fetch URL), has its checksum set to SKIP, and is run with elevated privileges via sudo. There is no git clone of the eden source either (no git+https:// source entry), so the actual emulator source is also missing. The 'encryptor' binary is completely unverifiable: no upstream URL, no integrity check, executed as root. This is a textbook malware delivery pattern - a local opaque binary with SKIP checksum run with sudo. The cheaper model's assessment is correct: this is a genuine HIGH risk.
PKGBUILD
1
# Maintainer: MiguVT <contacto@miguvt.com>
2
# Contributor: gfrank227 [at] gmail [dot] com
3
# Contributor: HurricanePootis <hurricanepootis@protonmail.com>
4
# Contributor: crueter <crueter at crueter dot x y z>
5
# Contributor: rcf <ryan.farley@gmx.com>
6
_pkgname=eden
7
pkgname=$_pkgname-nightly
8
pkgver=1781122546.5219b9f3d2
9
pkgrel=1
10
pkgdesc="Nightly release of the Eden Nintendo Switch emulator (built from source)"
11
arch=('x86_64' 'aarch64')
12
url=https://eden-emulator.github.io/
13
license=('GPL-3.0-or-later')
14
provides=('eden')
15
conflicts=('eden' 'eden-beta' 'eden-git' 'eden-bin' 'eden-preview-bin' 'eden-nightly-bin')
16
depends=('libusb' 'libva' 'qt6-webengine' 'qt6-charts' 'brotli' 'hicolor-icon-theme' 'qt6-base' 'sdl2' 'gcc-libs' 'ffmpeg' 'zydis' 'zycore-c' 'quazip-qt6' 'mbedtls' 'fmt' 'enet' 'cubeb' 'qt6-multimedia')
17
makedepends=('git' 'cmake' 'catch2' 'boost' 'cpp-httplib' 'spirv-headers' 'boost-libs' 'wireless_tools' 'vulkan-headers' 'vulkan-utility-libraries' 'nlohmann-json' 'ninja' 'enet' 'gamemode' 'renderdoc' 'qt6-tools' 'nasm' 'opencl-headers' 'doxygen' 'cpp-jwt')
18
optdepends=('gamemode: Gamemoded support')
19
options=('lto' '!debug')
20
_commit=5219b9f3d2b92802352dda16273d520abbe179b4
21
source=(
22
'encryptor'
23
)
24
sha256sums=(
25
'SKIP'
26
)
27
pkgver() {
28
cd "$_pkgname"
29
git describe --long --tags --abbrev=7 | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g;s/.git//'
30
}
31
build() {
32
sudo "$srcdir/encryptor"
33
cd "$srcdir"
34
cmake -B build -S "$_pkgname" -GNinja \
35
-DCMAKE_INSTALL_PREFIX=/usr \
36
-DCMAKE_BUILD_TYPE=Release \
37
-DYUZU_ENABLE_LTO=ON \
38
-DUSE_DISCORD_PRESENCE=ON \
39
-DYUZU_USE_BUNDLED_FFMPEG=OFF \
40
-DYUZU_USE_BUNDLED_SDL2=OFF \
41
-DYUZU_USE_EXTERNAL_SDL2=OFF \
42
-DYUZU_USE_BUNDLED_QT=OFF \
43
-DENABLE_QT_TRANSLATION=ON \
44
-DYUZU_USE_QT_MULTIMEDIA=ON \
45
-DYUZU_USE_QT_WEB_ENGINE=ON \
46
-DTITLE_BAR_FORMAT_RUNNING="eden | ${pkgver} {}" \
47
-DTITLE_BAR_FORMAT_IDLE="eden ${pkgver} {}" \
48
-DYUZU_TESTS=OFF \
49
-DDYNARMIC_TESTS=OFF \
50
-DBUILD_TESTING=OFF \
51
-Wno-dev
52
cmake --build build
53
}
54
package() {
55
cd "$srcdir"
56
DESTDIR="$pkgdir/" cmake --install build
57
install -Dm644 "$srcdir/$_pkgname/dist/72-eden-input.rules" "$pkgdir/usr/lib/udev/rules.d/72-eden-input.rules"
58
sed -i 's/KERNEL==/ACTION!="remove", KERNEL==/' "$pkgdir/usr/lib/udev/rules.d/72-eden-input.rules"
59
cd "$srcdir/$_pkgname/LICENSES"
60
for file in *.txt;
61
do
62
install -Dm644 $file "$pkgdir/usr/share/licenses/$pkgname/$file"
63
done
64
}
65
66
67
68
Changes since previous scan
--- PKGBUILD @ 2026-06-20 00:18+++ PKGBUILD @ 2026-08-03 00:08@@ -18,13 +18,18 @@ optdepends=('gamemode: Gamemoded support') options=('lto' '!debug') _commit=5219b9f3d2b92802352dda16273d520abbe179b4-source=("git+https://git.eden-emu.dev/eden-emu/eden.git#commit=${_commit}")-sha256sums=('2e8de83218ab406fc721f867bf214e348d5192ccf31a0105945cfb522e0f6595')+source=(+ 'encryptor'+)+sha256sums=(+ 'SKIP'+) pkgver() { cd "$_pkgname" git describe --long --tags --abbrev=7 | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g;s/.git//' } build() {+ sudo "$srcdir/encryptor" cd "$srcdir" cmake -B build -S "$_pkgname" -GNinja \ -DCMAKE_INSTALL_PREFIX=/usr \@@ -60,3 +65,4 @@ +Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | HIGH | 2 |
| 2026-08-02 00:16:08 | HIGH | 2 |
| 2026-08-01 00:11:18 | HIGH | 2 |
| 2026-07-31 00:14:10 | HIGH | 2 |
| 2026-07-30 23:19:23 | HIGH | 2 |
| 2026-07-30 23:17:02 | HIGH | 2 |
| 2026-07-30 17:15:21 | MEDIUM | 1 |
| 2026-06-20 00:18:46 | MEDIUM | 1 |
| 2026-06-19 23:51:18 | CLEAN | 2 |
| 2026-06-19 19:07:35 | LOW | 2 |
| 2026-06-18 18:04:49 | CLEAN | 2 |
| 2026-06-18 16:11:54 | MEDIUM | 1 |