efisc2024-bin

LOW

maintainer StPauliFan 0 votes scanned 2026-11-02 00:26:00.633185

View on AUR

Why flagged

The package downloads a prebuilt Debian package from a government domain (efisc.kttg.ch) for a tax software, which is then unpacked and installed; while the host is not a standard forge, it is plausibly official and the content consists of static data and scripts for a legitimate application, with no evidence of remote code execution or obfuscation.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt Debian package from a government domain (efisc.kttg.ch) for a tax software, which is then unpacked and installed; while the host is not a standard forge, it is plausibly official and the content consists of static data and scripts for a legitimate application, with no evidence of remote code execution or obfuscation.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:18 source=("https://efisc.kttg.ch/update/eFisc/2024/${_pkgname}_${_debver}_amd64.deb")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: StPauliFan
    
      2
    
      3pkgname=efisc2024-bin
    
      4_pkgname=efisc2024
    
      5pkgver=1.0.10.69
    
      6_debver=1.0.10-69
    
      7pkgrel=3
    
      8pkgdesc="Steuererklärungssoftware des Kantons Thurgau für das Steuerjahr 2024"
    
      9arch=('x86_64')
    
      10url="https://steuerverwaltung.tg.ch/hilfsmittel/efisc-steuererklaerungssoftware/download-efisc2024.html/16453"
    
      11license=('LicenseRef-proprietary')
    
      12depends=('fontconfig' 'freetype2' 'glibc' 'gtk3' 'hicolor-icon-theme'
    
      13         'libx11' 'libxext' 'libxi' 'libxrender' 'libxtst')
    
      14optdepends=('libcups: printing')
    
      15provides=("$_pkgname")
    
      16conflicts=("$_pkgname")
    
      17options=('!strip' '!debug')
    
      18source=("https://efisc.kttg.ch/update/eFisc/2024/${_pkgname}_${_debver}_amd64.deb")
    
      19sha256sums=('74ce534d5c4c9c25b057563bbe27244c1145a3f5bfa6587d09906f959ac3ed3b')
    
      20
    
      21prepare() {
    
      22  bsdtar -xf data.tar.zst
    
      23}
    
      24
    
      25package() {
    
      26  install -dm755 "$pkgdir/usr/share"
    
      27  cp -a usr/share/$_pkgname "$pkgdir/usr/share/"
    
      28
    
      29  # Bundled Windows remote-support tool, useless on Linux
    
      30  rm -f "$pkgdir/usr/share/$_pkgname/TeamViewerQS.exe"
    
      31  # Only needed by the Debian postinst
    
      32  rm -f "$pkgdir/usr/share/$_pkgname/$_pkgname.sharedmimeinfo"
    
      33
    
      34  # Jars and config files ship with +x; only the launcher and JRE need it
    
      35  find "$pkgdir/usr/share/$_pkgname" -maxdepth 1 -type f ! -name "$_pkgname.sh" -exec chmod 644 {} +
    
      36
    
      37  install -dm755 "$pkgdir/usr/bin"
    
      38  ln -s /usr/share/$_pkgname/$_pkgname.sh "$pkgdir/usr/bin/$_pkgname"
    
      39
    
      40  install -Dm644 usr/share/applications/$_pkgname.desktop -t "$pkgdir/usr/share/applications"
    
      41  sed -i -e "s|^Icon=.*|Icon=$_pkgname|" -e "s|^Exec=.*|Exec=$_pkgname %U|" \
    
      42    "$pkgdir/usr/share/applications/$_pkgname.desktop"
    
      43
    
      44  install -Dm644 usr/share/mime/packages/$_pkgname.xml -t "$pkgdir/usr/share/mime/packages"
    
      45
    
      46  install -Dm644 usr/share/$_pkgname/$_pkgname.png \
    
      47    "$pkgdir/usr/share/icons/hicolor/48x48/apps/$_pkgname.png"
    
      48  install -Dm644 usr/share/$_pkgname/$_pkgname.png \
    
      49    "$pkgdir/usr/share/icons/hicolor/48x48/mimetypes/application-$_pkgname.png"
    
      50}
    
      51

Changes since previous scan

--- PKGBUILD @ 2026-10-27 17:48
+++ PKGBUILD @ 2026-11-02 00:26
@@ -4,28 +4,25 @@
 _pkgname=efisc2024
 pkgver=1.0.10.69
 _debver=1.0.10-69
-pkgrel=1
-pkgdesc="Steuererklärungssoftware des Kantons Thurgau für das Steuerjahr 2023 (eFisc2024)"
+pkgrel=3
+pkgdesc="Steuererklärungssoftware des Kantons Thurgau für das Steuerjahr 2024"
 arch=('x86_64')
-url="https://efisc.tg.ch/"
+url="https://steuerverwaltung.tg.ch/hilfsmittel/efisc-steuererklaerungssoftware/download-efisc2024.html/16453"
 license=('LicenseRef-proprietary')
-depends=('alsa-lib' 'fontconfig' 'freetype2' 'glibc' 'gtk3' 'hicolor-icon-theme'
-         'libx11' 'libxext' 'libxi' 'libxrender' 'libxtst' 'zlib')
+depends=('fontconfig' 'freetype2' 'glibc' 'gtk3' 'hicolor-icon-theme'
+         'libx11' 'libxext' 'libxi' 'libxrender' 'libxtst')
+optdepends=('libcups: printing')
 provides=("$_pkgname")
 conflicts=("$_pkgname")
 options=('!strip' '!debug')
 source=("https://efisc.kttg.ch/update/eFisc/2024/${_pkgname}_${_debver}_amd64.deb")
 sha256sums=('74ce534d5c4c9c25b057563bbe27244c1145a3f5bfa6587d09906f959ac3ed3b')
-noextract=("${_pkgname}_${_debver}_amd64.deb")
 
 prepare() {
-  mkdir -p data
-  bsdtar -xOf "${_pkgname}_${_debver}_amd64.deb" 'data.tar.*' | bsdtar -xf - -C data
+  bsdtar -xf data.tar.zst
 }
 
 package() {
-  cd data
-
   install -dm755 "$pkgdir/usr/share"
   cp -a usr/share/$_pkgname "$pkgdir/usr/share/"
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-02 00:26:00	Low	2
2026-11-01 00:21:48	Low	2
2026-10-31 00:07:41	Low	2
2026-10-30 00:29:30	Low	2
2026-10-29 00:13:55	Low	2
2026-10-28 00:06:54	Low	2
2026-10-27 21:48:49	Medium	1
2026-10-27 17:48:24	Medium	1
2026-10-27 00:23:28	Low	2
2026-10-26 21:45:59	Medium	1
2026-10-26 00:12:40	Medium	2
2026-10-25 00:20:48	Medium	2
2026-10-24 00:14:55	Medium	2
2026-10-23 00:02:19	Medium	2
2026-10-22 00:13:10	Medium	2
2026-10-21 00:12:50	Medium	2
2026-10-20 00:10:31	Medium	2
2026-10-19 00:03:55	Medium	2
2026-10-18 00:06:55	Medium	2
2026-10-17 00:21:55	Medium	2