nordvpn-bin

maintainer Mxzcabel · 179 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package downloads official NordVPN .deb binaries from the vendor's own repository domain (repo.nordvpn.com), which is plausibly legitimate; the files are verified via sha256sums, and no untrusted remote code execution occurs.

Triggered rules

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads official NordVPN .deb binaries from the vendor's own repository domain (repo.nordvpn.com), which is plausibly legitimate; the files are verified via sha256sums, and no untrusted remote code execution occurs.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source_x86_64=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_amd64.deb")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Cabel <mxzcabel at tuta dot com>
    
      2# Contributor: metiis <aur at metiis dot com>
    
      3# Contributor: Julio Gutierrez <bubuntux at gmail dot com>
    
      4# Contributor: Martoko <mbastholm at gmail dot com>
    
      5
    
      6pkgname=nordvpn-bin
    
      7pkgver=5.3.0
    
      8pkgrel=1
    
      9pkgdesc="NordVPN CLI tool for Linux"
    
      10arch=('x86_64' 'i686' 'armv7h' 'aarch64' 'armeabi')
    
      11url="https://nordvpn.com/download/linux/"
    
      12license=('GPL3')
    
      13provides=('nordvpn')
    
      14conflicts=('openvpn-nordvpn')
    
      15install=nordvpn-bin.install
    
      16source_x86_64=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_amd64.deb")
    
      17source_i686=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_i386.deb")
    
      18source_armv7h=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_armhf.deb")
    
      19source_aarch64=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_arm64.deb")
    
      20source_armeabi=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_armel.deb")
    
      21sha256sums_x86_64=('34cdea72a75c9700c285b950ed2ec96acaeed4d607013a3abd18366731f8c334')
    
      22sha256sums_i686=('c6e3908876941698a41287e01ca4327d9f2c0116469c2de072e3767ba551c5ae')
    
      23sha256sums_armv7h=('34ee5e8ee89b22a1082b67253ca9eb61bcd4c158afb3a163b00c5b6679178c71')
    
      24sha256sums_aarch64=('87fc3fbacd289fbf2242d52b62da363b7e799701504dd7a98013db63df372999')
    
      25sha256sums_armeabi=('43caf6489ebc9d9f97d97be40312abfbfb7e07022aed76294830818cd993e1ca')
    
      26
    
      27package() {
    
      28    bsdtar -O -xf *.deb data.tar.gz | bsdtar -C "${pkgdir}" -xJf -
    
      29
    
      30    mv "${pkgdir}/usr/sbin/nordvpnd" "${pkgdir}/usr/bin"
    
      31    rm -r "${pkgdir}/etc/init.d"
    
      32    rm -r "${pkgdir}/usr/sbin"
    
      33    chmod 750 "${pkgdir}/var/lib/nordvpn/"
    
      34    chmod 750 "${pkgdir}/var/lib/nordvpn/data/"
    
      35    echo "g nordvpn - -" | install -Dm644 /dev/stdin "${pkgdir}/usr/lib/sysusers.d/${pkgname}.conf"
    
      36}
    
      37

Changes since previous scan

--- PKGBUILD @ 2026-07-03 00:17
+++ PKGBUILD @ 2026-08-18 00:03
@@ -4,7 +4,7 @@
 # Contributor: Martoko <mbastholm at gmail dot com>
 
 pkgname=nordvpn-bin
-pkgver=5.2.0
+pkgver=5.3.0
 pkgrel=1
 pkgdesc="NordVPN CLI tool for Linux"
 arch=('x86_64' 'i686' 'armv7h' 'aarch64' 'armeabi')
@@ -18,11 +18,11 @@
 source_armv7h=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_armhf.deb")
 source_aarch64=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_arm64.deb")
 source_armeabi=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_armel.deb")
-sha256sums_x86_64=('9850701f589e742e4d92c43eee1f2188262ddb71f40e5453d3a2ad79503db89b')
-sha256sums_i686=('c119fd9190a1893be659aae1749a8b1a56641f72fe64852b1d27cc35f65b2872')
-sha256sums_armv7h=('9ffb7020b0f154209c33fb83f30ea4405256d7068ce0ba602c60fb78350f107c')
-sha256sums_aarch64=('7167223efdca6daf1f84281ed4d2781414a51a4992c51aaa5cab9eb44c979eb4')
-sha256sums_armeabi=('7289bb44e29ec3f037a05e4047f1d3559536252ccbe94e07ba99c617c25bfcab')
+sha256sums_x86_64=('34cdea72a75c9700c285b950ed2ec96acaeed4d607013a3abd18366731f8c334')
+sha256sums_i686=('c6e3908876941698a41287e01ca4327d9f2c0116469c2de072e3767ba551c5ae')
+sha256sums_armv7h=('34ee5e8ee89b22a1082b67253ca9eb61bcd4c158afb3a163b00c5b6679178c71')
+sha256sums_aarch64=('87fc3fbacd289fbf2242d52b62da363b7e799701504dd7a98013db63df372999')
+sha256sums_armeabi=('43caf6489ebc9d9f97d97be40312abfbfb7e07022aed76294830818cd993e1ca')
 
 package() {
     bsdtar -O -xf *.deb data.tar.gz | bsdtar -C "${pkgdir}" -xJf -

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 00:17:07	LOW	2
2026-08-12 00:27:08	LOW	2
2026-08-11 13:21:13	LOW	2
2026-07-03 00:17:07	CLEAN	2
2026-07-02 10:45:12	LOW	2
2026-06-19 19:07:35	CLEAN	2
2026-06-18 18:55:24	LOW	1
2026-06-18 18:04:49	LOW	1
2026-06-18 16:11:54	LOW	1