lncvrt-games-launcher

MEDIUM
maintainer Lncvrt 0 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The package downloads a prebuilt .deb binary from a non-standard, third-party host (archive.org), which is an unverifiable executable and poses a supply-chain risk if the source were swapped.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:10 "https://archive.org/download/lncvrt-games-archive/lncvrt-games-launcher-new/Lncvrt-Games-Launcher-${pkgver}-linux-x64.deb"
Medium AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 95%): The package downloads a prebuilt .deb binary from a non-standard, third-party host (archive.org), which is an unverifiable executable and poses a supply-chain risk if the source were swapped.

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Lncvrt <lncvrtreal@gmail.com>
2pkgname=lncvrt-games-launcher
3pkgver=1.9.2
4pkgrel=2
5pkgdesc="The official Lncvrt Games Launcher AUR Package!"
6arch=('x86_64')
7depends=('gtk3' 'libx11')
8url="https://games.lncvrt.xyz"
9source=(
10 "https://archive.org/download/lncvrt-games-archive/lncvrt-games-launcher-new/Lncvrt-Games-Launcher-${pkgver}-linux-x64.deb"
11)
12sha256sums=(
13 '11453a420d97dbc3a490476cfbf7d19fc8725507442e463df89119816a4de7a3'
14)
15options=('!strip')
16package() {
17 bsdtar -xf "${srcdir}/Lncvrt-Games-Launcher-${pkgver}-linux-x64.deb" -C "${pkgdir}" data.tar.*
18 bsdtar -xf "${pkgdir}/data.tar."* -C "${pkgdir}"
19 rm -f "${pkgdir}"/data.tar.*
20}
21

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Medium 2
2026-10-31 00:07:41 Medium 2
2026-10-30 00:29:30 Medium 2
2026-10-29 00:13:55 Medium 2
2026-10-28 00:06:54 Medium 2
2026-10-27 00:23:28 Medium 2
2026-10-26 00:12:40 Medium 2
2026-10-25 00:20:48 Medium 2
2026-10-24 00:14:55 Medium 2
2026-10-23 00:02:19 Medium 2
2026-10-22 00:13:10 Medium 2
2026-10-21 00:12:50 Medium 2
2026-10-20 00:10:31 Medium 2
2026-10-19 00:03:55 Medium 2
2026-10-18 00:06:55 Medium 2
2026-10-17 00:21:55 Medium 2
2026-10-16 00:12:47 Medium 2
2026-10-15 00:28:05 Medium 2
2026-10-14 00:06:47 Medium 2
2026-10-13 00:23:45 Medium 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion