feishu-follow-system

LOW

maintainer falser 0 votes scanned 2026-08-23 05:22:36.427968

View on AUR

Why flagged

The .deb is downloaded from sf3-cn.feishucdn.com which is Feishu/Lark's own official CDN, has a pinned SHA256 checksum, and the two bundled local files (enable-follow-system.py and linux-theme-preload.c) are used only to patch the installed app for system theme support; no obfuscation, no exfiltration, and no unverifiable remote code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 70%): The .deb is downloaded from sf3-cn.feishucdn.com which is Feishu/Lark's own official CDN, has a pinned SHA256 checksum, and the two bundled local files (enable-follow-system.py and linux-theme-preload.c) are used only to patch the installed app for system theme support; no obfuscation, no exfiltration, and no unverifiable remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:23 source_x86_64=("https://sf3-cn.feishucdn.com/obj/ee-appcenter/${_pkghash_x64}/Feishu-linux_x64-${pkgver}.deb")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: falser <zjf_0731 at 163 dot com>
    
      2# Contributor: Allen Zhong <pdev@zhoal.pw>
    
      3# Contributor: Xuanwo <github@xuanwo.io>
    
      4# Contributor: Zhou Zhiqiang <aur@strrl.dev>
    
      5# Contributor: Feishu Linux Team <contact@feishu.cn>
    
      6pkgname=feishu-follow-system
    
      7pkgver=7.72.23
    
      8_pkgtyp=stable
    
      9_pkghash_x64=fc38d53a
    
      10_pkghash_arm64=8d668c7a
    
      11pkgrel=1
    
      12pkgdesc="Feishu (Lark) Linux client with follow-system color scheme"
    
      13arch=('x86_64' 'aarch64')
    
      14url="https://www.feishu.cn/"
    
      15license=('unknown')
    
      16depends=('ca-certificates' 'gtk3' 'nss' 'xdg-utils')
    
      17makedepends=('python')
    
      18conflicts=('feishu' 'feishu-bin' 'bytedance-feishu-stable-bin')
    
      19provides=('feishu' 'bytedance-feishu')
    
      20options=('!strip' '!emptydirs')
    
      21install=${pkgname}.install
    
      22source=('enable-follow-system.py' 'linux-theme-preload.c')
    
      23source_x86_64=("https://sf3-cn.feishucdn.com/obj/ee-appcenter/${_pkghash_x64}/Feishu-linux_x64-${pkgver}.deb")
    
      24source_aarch64=("https://sf3-cn.feishucdn.com/obj/ee-appcenter/${_pkghash_arm64}/Feishu-linux_arm64-${pkgver}.deb")
    
      25sha256sums=('4d69b26ff781c02426c6a7420e97ba771cd1ba02426b177ef3361889f37c342e'
    
      26            '22c1a9e2d6685f37790e29d905ac7a99d57a7a01e7a9e80c47e086ad2716fa4f')
    
      27sha256sums_x86_64=('7c744ce101e29f50d8d0fc099788b64cb389dde3178178a7fce9ffcdbf296e13')
    
      28sha256sums_aarch64=('8052d22189546438e24b3691d64871805961ecea7a45804c75a2960ed2b8710e')
    
      29
    
      30package(){
    
      31  tar xpvf "${srcdir}/data.tar.xz" --xattrs-include='*' --numeric-owner -C "${pkgdir}"
    
      32
    
      33  python "${srcdir}/enable-follow-system.py" \
    
      34    "${pkgdir}/opt/bytedance/feishu"
    
      35
    
      36  install -d "${pkgdir}/usr/lib/${pkgname}"
    
      37  if [[ "$CARCH" == x86_64 ]]; then
    
      38    cc -shared -fPIC -O2 -pthread \
    
      39      -o "${pkgdir}/usr/lib/${pkgname}/libfeishu_linux_theme.so" \
    
      40      "${srcdir}/linux-theme-preload.c" \
    
      41      -ldl
    
      42  fi
    
      43
    
      44  cd "${pkgdir}"
    
      45  cat << EOF > usr/bin/feishu
    
      46#!/bin/bash
    
      47
    
      48XDG_CONFIG_HOME=\${XDG_CONFIG_HOME:-~/.config}
    
      49
    
      50# Allow users to override command-line options
    
      51if [[ -f \$XDG_CONFIG_HOME/feishu-flags.conf ]]; then
    
      52    FEISHU_USER_FLAGS="\$(grep -v '^#' \$XDG_CONFIG_HOME/feishu-flags.conf)"
    
      53fi
    
      54
    
      55exec /usr/bin/bytedance-feishu-${_pkgtyp} \$FEISHU_USER_FLAGS "\$@"
    
      56EOF
    
      57  chmod +x usr/bin/feishu
    
      58
    
      59  sed -i "s/bytedance-feishu-${_pkgtyp}/feishu/g" "${pkgdir}/usr/share/applications/bytedance-feishu.desktop"
    
      60  sed -i 's/StartupNotify=true/StartupNotify=true\nStartupWMClass=feishu/g' "${pkgdir}/usr/share/applications/bytedance-feishu.desktop"
    
      61
    
      62  sed -i "s/bytedance-feishu-${_pkgtyp}/feishu/g" "${pkgdir}/usr/share/menu/bytedance-feishu.menu"
    
      63  sed -i "s/bytedance-feishu/feishu/g" "${pkgdir}/usr/share/menu/bytedance-feishu.menu"
    
      64
    
      65  sed -i 's/bytedance-feishu/feishu/g' "${pkgdir}/usr/share/appdata/bytedance-feishu.appdata.xml"
    
      66
    
      67  sed -i "s/bytedance-feishu-${_pkgtyp}/feishu/g" "${pkgdir}/opt/bytedance/feishu/bytedance-feishu"
    
      68
    
      69  if [[ "$CARCH" == x86_64 ]]; then
    
      70    sed -i '/^export LD_LIBRARY_PATH/a \
    
      71THEME_SO=/usr/lib/'"${pkgname}"'/libfeishu_linux_theme.so\
    
      72if [ -f "$THEME_SO" ]; then\
    
      73  export LD_PRELOAD="$THEME_SO${LD_PRELOAD:+:$LD_PRELOAD}"\
    
      74fi' "${pkgdir}/opt/bytedance/feishu/bytedance-feishu"
    
      75  fi
    
      76
    
      77  mv "${pkgdir}"/usr/share/menu/{bytedance-,}feishu.menu
    
      78  mv "${pkgdir}"/usr/share/applications/{bytedance-,}feishu.desktop
    
      79  mv "${pkgdir}"/usr/share/appdata/{bytedance-,}feishu.appdata.xml
    
      80  mv "${pkgdir}"/usr/share/man/man1/{bytedance-feishu-${_pkgtyp},feishu}.1.gz
    
      81  mv "${pkgdir}"/usr/share/doc/{bytedance-feishu-${_pkgtyp},feishu}
    
      82
    
      83  find "${pkgdir}" -type d | xargs chmod 755
    
      84}
    
      85

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-23 05:22:36	Low	3
2026-08-23 05:19:50	Medium	2