netleak-bin

MEDIUM

maintainer QiE2035 0 votes scanned 2026-09-16 03:21:15.990005

View on AUR

Why flagged

Installs a prebuilt binary and kernel module from a GitHub release, which is an unverifiable executable artifact; while GitHub is generally trusted, the RPMs are not built from source in the PKGBUILD, creating a supply-chain risk if the release was compromised.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 90%): Installs a prebuilt binary and kernel module from a GitHub release, which is an unverifiable executable artifact; while GitHub is generally trusted, the RPMs are not built from source in the PKGBUILD, creating a supply-chain risk if the release was compromised.

PKGBUILD

      1# Maintainer: 企鹅2035 <qie2035@qq.com>
    
      2
    
      3pkgname=netleak-bin
    
      4pkgver=1.1.1
    
      5pkgrel=1
    
      6pkgdesc='Kernel-level, proxychains-like tool for per-process traffic redirection on Linux (cgroup v2 + eBPF)'
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://github.com/MuriloChianfa/netleak'
    
      9license=('MIT' 'GPL-3.0-only')
    
      10depends=('glibc')
    
      11provides=('netleak')
    
      12conflicts=('netleak')
    
      13source_x86_64=("${pkgname}-${pkgver}-x86_64.rpm::https://github.com/MuriloChianfa/netleak/releases/download/v${pkgver}/netleak-${pkgver}-1.fc40.x86_64_fedora-40-x86_64.rpm")
    
      14source_aarch64=("${pkgname}-${pkgver}-aarch64.rpm::https://github.com/MuriloChianfa/netleak/releases/download/v${pkgver}/netleak-${pkgver}-1.fc40.aarch64_fedora-40-aarch64.rpm")
    
      15sha256sums_x86_64=('f452aaedb4cd9d48f404cc9a7c34cf028b934083948027e0d4ac9ec810d2d46f')
    
      16sha256sums_aarch64=('8a0b8771906f6d0fedc7dcab067de94ac3028b85ef8eb01185827e9418306d7a')
    
      17
    
      18package() {
    
      19	install -Dm755 usr/bin/netleak -t "${pkgdir}/usr/bin"
    
      20	install -Dm644 usr/lib/netleak/netleak.o -t "${pkgdir}/usr/lib/netleak"
    
      21	install -Dm644 usr/share/doc/netleak/LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      22	install -Dm644 usr/share/doc/netleak/LICENSE-GPL "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE-GPL"
    
      23}
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-16 03:21:15	Medium	2