harulake

maintainer Franca · 0 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The package installs an executable script from a non-whitelisted, unverifiable source (GitHub raw content) with a skipped checksum, posing a supply-chain risk if the host or repository were compromised.

Triggered rules

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

MEDIUM AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 95%): The package installs an executable script from a non-whitelisted, unverifiable source (GitHub raw content) with a skipped checksum, posing a supply-chain risk if the host or repository were compromised.

PKGBUILD

      1# Maintainer: TeaHouseLab(aka. Tsingkwai) <tsingkwai at ruzh dot top>
    
      2pkgname="harulake"
    
      3pkgver="2"
    
      4pkgrel="2"
    
      5pkgdesc="HaruLake - Help you pack a ctpkg"
    
      6arch=("x86_64")
    
      7url="https://ruzhtw.top/2022/01/02/How-to-make-a-ctpm-package"
    
      8depends=("fish")
    
      9license=("GPL-3.0 License")
    
      10provides=("harulake")
    
      11source=("https://raw.githubusercontent.com/TeaHouseLab/harulake/main/app")
    
      12sha256sums=("SKIP")
    
      13package() {
    
      14	mkdir -p "${pkgdir}/usr/bin"
    
      15	cp "${srcdir}/app" "${pkgdir}/usr/bin/harulake"
    
      16	chmod +x "${pkgdir}/usr/bin/harulake"
    
      17	rm ../app
    
      18	}
    
      19
    
      20

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	2
2026-08-02 00:16:08	MEDIUM	2
2026-08-01 00:11:18	MEDIUM	2
2026-07-31 00:14:10	MEDIUM	2
2026-07-30 00:17:23	MEDIUM	2
2026-07-29 00:25:53	MEDIUM	2
2026-07-28 00:07:28	MEDIUM	2
2026-07-27 00:24:32	MEDIUM	2
2026-07-26 00:07:32	MEDIUM	2
2026-07-25 00:13:44	MEDIUM	2
2026-07-24 00:02:28	MEDIUM	2
2026-07-23 00:14:47	MEDIUM	2
2026-07-22 00:29:32	MEDIUM	2
2026-07-21 13:17:02	MEDIUM	2
2026-06-18 16:11:54	CLEAN	0