nhiicc

maintainer imrehg · 5 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The package downloads a prebuilt executable from a non-standard, non-whitelisted host (cloudicweb.nhi.gov.tw) which could be subject to supply-chain tampering, though it appears to be the official source for the software.

Triggered rules

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:21 source=("CMS_mNHIICC_Setup-$pkgver.Linux.zip"::"https://cloudicweb.nhi.gov.tw/cloudic/system/SMC/CMS_mNHIICC_Setup.Linux.zip"

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

MEDIUM AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt executable from a non-standard, non-whitelisted host (cloudicweb.nhi.gov.tw) which could be subject to supply-chain tampering, though it appears to be the official source for the software.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Chih-Hsuan Yen <base64_decode("eXUzYWN0eHQydHR0ZmlteEBjaHllbi5jYwo=")>
    
      2
    
      3# Testing pages:
    
      4# * https://cloudicweb.nhi.gov.tw/cloudic/system/SMC/webtesting/SampleY.aspx
    
      5# * /usr/share/nhiicc/html/ESample.html in this package
    
      6
    
      7pkgname=nhiicc
    
      8epoch=1
    
      9pkgver=20240710.1
    
      10pkgrel=3
    
      11arch=(x86_64)
    
      12url='https://cloudicweb.nhi.gov.tw/cloudic/system/SMC/mEventesting.htm'
    
      13license=(custom)
    
      14pkgdesc='台灣健保卡網路註冊憑證元件 (National Health Insurance IC Card)'
    
      15# sed and openssl are for commands used in nhiicc.install
    
      16depends=(pcsclite sed openssl)
    
      17makedepends=(patchelf)
    
      18optdepends=(
    
      19  'lib32-pcsclite: for using card readers with 32-bit driver only'
    
      20)
    
      21source=("CMS_mNHIICC_Setup-$pkgver.Linux.zip"::"https://cloudicweb.nhi.gov.tw/cloudic/system/SMC/CMS_mNHIICC_Setup.Linux.zip"
    
      22        nhiicc.service
    
      23        nhiicc.rules
    
      24        regen-certs.sh)
    
      25noextract=("CMS_mNHIICC_Setup-$pkgver.Linux.zip")
    
      26# See https://cloudicweb.nhi.gov.tw/cloudic/system/SMC/mEventesting.htm for MD5 sums
    
      27md5sums=('3bbad14d8ce82a504811319e06c3cdac'
    
      28         '3a7ba068b49eab2edca614ea2495e706'
    
      29         'e4a249ff4e638527a0bde9deec6eeb5a'
    
      30         '97e402f39fffe35e411419d062f6baf8')
    
      31install=nhiicc.install
    
      32
    
      33prepare() {
    
      34  bsdtar xOf CMS_mNHIICC_Setup-${pkgver}.Linux.zip | bsdtar x
    
      35
    
      36  # Delete insecure RUNPATH
    
      37  patchelf --remove-rpath mLNHIICC_Setup/x64/mLNHIICC
    
      38}
    
      39
    
      40package() {
    
      41  install -Dm755 mLNHIICC_Setup/x64/mLNHIICC -t "$pkgdir"/usr/bin
    
      42  install -Dm755 regen-certs.sh -t "$pkgdir"/usr/share/nhiicc/
    
      43  cp -dr mLNHIICC_Setup/html "$pkgdir"/usr/share/nhiicc/
    
      44  install -Dm644 nhiicc.service -t "$pkgdir"/usr/lib/systemd/system/
    
      45  install -Dm644 nhiicc.rules -t "$pkgdir"/usr/share/polkit-1/rules.d
    
      46}
    
      47

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	3
2026-08-02 00:16:08	MEDIUM	3
2026-08-01 00:11:18	MEDIUM	3
2026-07-31 00:14:10	MEDIUM	3
2026-07-30 00:17:23	MEDIUM	3
2026-07-29 00:25:53	MEDIUM	3
2026-07-28 00:07:28	MEDIUM	3
2026-07-27 00:24:32	MEDIUM	3
2026-07-26 00:07:32	MEDIUM	3
2026-07-25 00:13:44	MEDIUM	3
2026-07-24 00:02:28	MEDIUM	3
2026-07-23 00:14:47	MEDIUM	3
2026-07-22 00:29:32	MEDIUM	3
2026-07-21 00:24:15	MEDIUM	3
2026-07-20 00:19:49	MEDIUM	3
2026-07-19 00:17:08	MEDIUM	3
2026-07-18 00:14:48	MEDIUM	3
2026-07-17 00:06:16	MEDIUM	3
2026-07-16 00:05:41	MEDIUM	3
2026-07-15 00:09:25	MEDIUM	3