fastnet-bin

MEDIUM

maintainer taotieren 0 votes scanned 2026-11-01 00:21:48.120785

View on AUR

Why flagged

The package downloads a prebuilt binary from a non-standard, untrusted host (koolcenter.com), which could be silently swapped, posing a supply-chain risk.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("https://fw0.koolcenter.com/binary/fastnet/${pkgname%-bin}-binary-raw-${pkgver}.tar.gz")

Medium AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt binary from a non-standard, untrusted host (koolcenter.com), which could be silently swapped, posing a supply-chain risk.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: taotieren <admin@taotieren.com>
    
      2
    
      3pkgbase=fastnet-bin
    
      4pkgname=fastnet-bin
    
      5_name=FastNet
    
      6pkgver=0.7.8
    
      7pkgrel=1
    
      8pkgdesc="FastNet -- Goal: Make a full-platform speed measurement software! - TUI"
    
      9arch=($CARCH)
    
      10url="https://www.koolcenter.com/t/topic/9148"
    
      11license=('LicenseRef-fastnet')
    
      12provides=(${pkgbase%-bin})
    
      13conflicts=(${pkgbase%-bin})
    
      14depends=()
    
      15makedepends=()
    
      16optdepends=()
    
      17source=("https://fw0.koolcenter.com/binary/fastnet/${pkgname%-bin}-binary-raw-${pkgver}.tar.gz")
    
      18sha256sums=('e2fe3b3050ee9f5ae84a0f548de7bb9e39655f5ded5fd4d1255369cf62f84735')
    
      19options=(!debug !strip)
    
      20
    
      21package() {
    
      22    cd "${srcdir}/${pkgname%-bin}-binary-raw-${pkgver}/"
    
      23    if [ ${CARCH} = "x86_64" ]; then
    
      24        install -vDm755 ${_name}.x86_64 ${pkgdir}/usr/bin/${pkgname%-bin}
    
      25    elif [ ${CARCH} = "aarch64" ]; then
    
      26        install -vDm755 ${_name}.aarch64 ${pkgdir}/usr/bin/${pkgname%-bin}
    
      27    elif [ ${CARCH} = "armv7h" ]; then
    
      28        install -vDm755 ${_name}.arm ${pkgdir}/usr/bin/${pkgname%-bin}
    
      29    fi
    
      30}
    
      31

Changes since previous scan

--- PKGBUILD @ 2026-10-27 00:23
+++ PKGBUILD @ 2026-11-01 00:21
@@ -2,8 +2,8 @@
 
 pkgbase=fastnet-bin
 pkgname=fastnet-bin
-_name=${pkgname%-bin}
-pkgver=0.7.6
+_name=FastNet
+pkgver=0.7.8
 pkgrel=1
 pkgdesc="FastNet -- Goal: Make a full-platform speed measurement software! - TUI"
 arch=($CARCH)
@@ -14,18 +14,18 @@
 depends=()
 makedepends=()
 optdepends=()
-source=("https://fw0.koolcenter.com/binary/fastnet/${_name}-binary-raw-${pkgver}.tar.gz")
-sha256sums=('98a4272ea1b086f7ff7ef09e666283f4e37eb6b8c6ede8ba5d4ca87cf5f2b361')
+source=("https://fw0.koolcenter.com/binary/fastnet/${pkgname%-bin}-binary-raw-${pkgver}.tar.gz")
+sha256sums=('e2fe3b3050ee9f5ae84a0f548de7bb9e39655f5ded5fd4d1255369cf62f84735')
 options=(!debug !strip)
 
 package() {
-    cd "${srcdir}/${_name}-binary-raw-${pkgver}/"
+    cd "${srcdir}/${pkgname%-bin}-binary-raw-${pkgver}/"
     if [ ${CARCH} = "x86_64" ]; then
-        install -vDm755 ${_name}.x86_64 ${pkgdir}/usr/bin/${_name}
+        install -vDm755 ${_name}.x86_64 ${pkgdir}/usr/bin/${pkgname%-bin}
     elif [ ${CARCH} = "aarch64" ]; then
-        install -vDm755 ${_name}.aarch64 ${pkgdir}/usr/bin/${_name}
+        install -vDm755 ${_name}.aarch64 ${pkgdir}/usr/bin/${pkgname%-bin}
     elif [ ${CARCH} = "armv7h" ]; then
-        install -vDm755 ${_name}.arm ${pkgdir}/usr/bin/${_name}
+        install -vDm755 ${_name}.arm ${pkgdir}/usr/bin/${pkgname%-bin}
     fi
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 00:21:48	Medium	2
2026-10-31 00:07:41	Medium	2
2026-10-30 00:29:30	Medium	2
2026-10-29 00:13:55	Medium	2
2026-10-28 00:06:54	Medium	2
2026-10-27 03:46:34	Medium	2
2026-10-27 00:23:28	Medium	2
2026-10-26 00:12:40	Medium	2
2026-10-25 00:20:48	Medium	2
2026-10-24 00:14:55	Medium	2
2026-10-23 00:02:19	Medium	2
2026-10-22 00:13:10	Medium	2
2026-10-21 00:12:50	Medium	2
2026-10-20 00:10:31	Medium	2
2026-10-19 00:03:55	Medium	2
2026-10-18 00:06:55	Medium	2
2026-10-17 00:21:55	Medium	2
2026-10-16 00:12:47	Medium	2
2026-10-15 00:28:05	Medium	2
2026-10-14 00:06:47	Medium	2