firefox-extension-kdeconnect
maintainer orphaned
· 1 votes
· scanned 2026-08-03 00:08:14.047287
MEDIUM
View on AUR ↗
Why flagged
The package downloads a prebuilt XPI from Mozilla's official add-ons site and a tarball from GitHub, both with unverified 'SKIP' checksums; while the sources are plausible, the lack of integrity checks on a recently orphaned and re-adopted package increases supply-chain risk.
Triggered rules
MEDIUM
Recently orphaned & re-adopted
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
MEDIUM
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 80%): The package downloads a prebuilt XPI from Mozilla's official add-ons site and a tarball from GitHub, both with unverified 'SKIP' checksums; while the sources are plausible, the lack of integrity checks on a recently orphaned and re-adopted package increases supply-chain risk.
PKGBUILD
1
pkgname=firefox-extension-kdeconnect
2
pkgver=0.1.6
3
pkgrel=1
4
pkgdesc='kdeconnect addon for firefox.'
5
arch=('x86_64')
6
url='https://addons.mozilla.org/en-US/firefox/addon/kde_connect/'
7
license=('GPLV3')
8
depends=('firefox' 'kdeconnect')
9
makedepends=('expect')
10
groups=('firefox-addons')
11
source=('extension.xpi::https://addons.mozilla.org/firefox/downloads/file/805784/kde_connect-${pkgver}-an+fx-linux.xpi'
12
"https://github.com/pdf/kdeconnect-chrome-extension/releases/download/v${pkgver}/kdeconnect-chrome-extension-v${pkgver}-linux_amd64.tar.xz")
13
sha512sums=('SKIP' 'SKIP')
14
15
build() {
16
cd ../
17
./script.exp # auto install with fake keystrokes
18
}
19
20
package() {
21
install -Dm644 extension.xpi "${pkgdir}/usr/lib/firefox/browser/extensions/kde-connect@0xc0dedbad.com.xpi"
22
}
23
24
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | MEDIUM | 2 |
| 2026-08-02 00:16:08 | MEDIUM | 2 |
| 2026-08-01 00:11:18 | MEDIUM | 2 |
| 2026-07-31 00:14:10 | MEDIUM | 2 |
| 2026-07-30 00:17:23 | MEDIUM | 2 |
| 2026-07-29 00:25:53 | MEDIUM | 2 |
| 2026-07-28 00:07:28 | MEDIUM | 2 |
| 2026-07-27 00:24:32 | MEDIUM | 2 |
| 2026-07-26 00:07:32 | MEDIUM | 2 |
| 2026-07-25 00:13:44 | MEDIUM | 2 |
| 2026-07-24 00:02:28 | MEDIUM | 2 |
| 2026-07-23 00:14:47 | MEDIUM | 2 |
| 2026-07-22 00:29:32 | MEDIUM | 2 |
| 2026-07-21 00:24:15 | MEDIUM | 2 |
| 2026-07-20 00:19:49 | MEDIUM | 2 |
| 2026-07-19 00:17:08 | MEDIUM | 2 |
| 2026-07-18 00:14:48 | MEDIUM | 2 |
| 2026-07-17 00:06:16 | MEDIUM | 2 |
| 2026-07-16 13:51:33 | MEDIUM | 2 |
| 2026-06-18 16:11:54 | CLEAN | 0 |