nordvpn-bin

LOW

maintainer Mxzcabel 181 votes scanned 2026-10-03 00:23:04.761738

View on AUR

Why flagged

The package downloads official NordVPN .deb binaries from the vendor's own repository domain (repo.nordvpn.com), which is plausibly legitimate; the files are verified via sha256sums, and no untrusted remote code execution occurs.

Triggered rules

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads official NordVPN .deb binaries from the vendor's own repository domain (repo.nordvpn.com), which is plausibly legitimate; the files are verified via sha256sums, and no untrusted remote code execution occurs.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source_x86_64=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_amd64.deb")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Cabel <mxzcabel at tuta dot com>
    
      2# Contributor: metiis <aur at metiis dot com>
    
      3# Contributor: Julio Gutierrez <bubuntux at gmail dot com>
    
      4# Contributor: Martoko <mbastholm at gmail dot com>
    
      5
    
      6pkgname=nordvpn-bin
    
      7pkgver=5.3.0
    
      8pkgrel=1
    
      9pkgdesc="NordVPN CLI tool for Linux"
    
      10arch=('x86_64' 'i686' 'armv7h' 'aarch64' 'armeabi')
    
      11url="https://nordvpn.com/download/linux/"
    
      12license=('GPL3')
    
      13provides=('nordvpn')
    
      14conflicts=('openvpn-nordvpn')
    
      15install=nordvpn-bin.install
    
      16source_x86_64=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_amd64.deb")
    
      17source_i686=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_i386.deb")
    
      18source_armv7h=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_armhf.deb")
    
      19source_aarch64=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_arm64.deb")
    
      20source_armeabi=("https://repo.nordvpn.com/deb/nordvpn/debian/pool/main/n/nordvpn/nordvpn_${pkgver//_/-}_armel.deb")
    
      21sha256sums_x86_64=('34cdea72a75c9700c285b950ed2ec96acaeed4d607013a3abd18366731f8c334')
    
      22sha256sums_i686=('c6e3908876941698a41287e01ca4327d9f2c0116469c2de072e3767ba551c5ae')
    
      23sha256sums_armv7h=('34ee5e8ee89b22a1082b67253ca9eb61bcd4c158afb3a163b00c5b6679178c71')
    
      24sha256sums_aarch64=('87fc3fbacd289fbf2242d52b62da363b7e799701504dd7a98013db63df372999')
    
      25sha256sums_armeabi=('43caf6489ebc9d9f97d97be40312abfbfb7e07022aed76294830818cd993e1ca')
    
      26
    
      27package() {
    
      28    bsdtar -O -xf *.deb data.tar.gz | bsdtar -C "${pkgdir}" -xJf -
    
      29
    
      30    mv "${pkgdir}/usr/sbin/nordvpnd" "${pkgdir}/usr/bin"
    
      31    rm -r "${pkgdir}/etc/init.d"
    
      32    rm -r "${pkgdir}/usr/sbin"
    
      33    chmod 750 "${pkgdir}/var/lib/nordvpn/"
    
      34    chmod 750 "${pkgdir}/var/lib/nordvpn/data/"
    
      35    echo "g nordvpn - -" | install -Dm644 /dev/stdin "${pkgdir}/usr/lib/sysusers.d/${pkgname}.conf"
    
      36}
    
      37

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2
2026-09-18 00:17:11	Low	2
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2