pceadvance

LOW

maintainer Sterophonick 0 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads prebuilt binaries and data files from a non-whitelisted but plausible archival host (zophar.net) for a ROM builder tool; while the sources are not from a standard upstream, they are consistent with the nature of abandonware/emulator tools, and the installed files are either data or Windows executables run via Wine, with no evidence of malicious payloads or remote code execution.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The package downloads prebuilt binaries and data files from a non-whitelisted but plausible archival host (zophar.net) for a ROM builder tool; while the sources are not from a standard upstream, they are consistent with the nature of abandonware/emulator tools, and the installed files are either data or Windows executables run via Wine, with no evidence of malicious payloads or remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:9 source=(https://www.zophar.net/fileuploads/2/16439qqcnu/PCEAdvance75Bin.zip

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Sterophonick
    
      2pkgname=pceadvance
    
      3_pkgname='pceadvance'
    
      4pkgver=7.5
    
      5pkgrel=3
    
      6pkgdesc='PCEAdvance ROM Builder'
    
      7arch=(x86_64 i686)
    
      8depends=('wine' 'winetricks')
    
      9source=(https://www.zophar.net/fileuploads/2/16439qqcnu/PCEAdvance75Bin.zip
    
      10        https://www.zophar.net/fileuploads/2/16440lvavd/PCEAdvance75EZ3.zip
    
      11        https://www.zophar.net/fileuploads/2/16441nhucp/PCEAdvanceSC.zip
    
      12        pceadvance
    
      13        pceadvance.desktop
    
      14        pceadvance.png)
    
      15makedepends=('p7zip')
    
      16md5sums=('40df81bc31ccead3dde5ee9ac61c83af'
    
      17         '5fb10b96a6d987e6b888d321c5ba33ab'
    
      18         '071b4e9eda896562a12a01e7bbbb89bd'
    
      19         'SKIP'
    
      20         'SKIP'
    
      21         'SKIP')
    
      22options=(!debug !strip)
    
      23noextract=('PCEAdvanceSC.zip' 'PCEAdvance75EZ3.zip')
    
      24
    
      25package() {
    
      26  install -Dm755 pceadvance $pkgdir/usr/bin/pceadvance
    
      27  install -Dm644 pceadvance.desktop $pkgdir/usr/share/applications/pceadvance.desktop
    
      28  install -Dm644 pceadvance.png $pkgdir/usr/share/pixmaps/pceadvance.png
    
      29
    
      30  mkdir -p $pkgdir/usr/share/pceadvance
    
      31
    
      32  cp -r $srcdir/CDfiles $pkgdir/usr/share/pceadvance
    
      33  cp -r $srcdir/CDROM_readme.txt $pkgdir/usr/share/pceadvance
    
      34  cp -r $srcdir/gamelist.txt $pkgdir/usr/share/pceadvance
    
      35  cp -r $srcdir/history.txt $pkgdir/usr/share/pceadvance
    
      36  cp -r $srcdir/PCEAdvance_ROM_BUILDER.EXE $pkgdir/usr/share/pceadvance
    
      37  mv $srcdir/pceadvance.gba $pkgdir/usr/share/pceadvance/pceadvance_generic.gba
    
      38  cp -r $srcdir/readme.txt $pkgdir/usr/share/pceadvance
    
      39  cp -r $srcdir/splashlogo.raw $pkgdir/usr/share/pceadvance
    
      40  cp -r $srcdir/xg2005_splash-logo.raw $pkgdir/usr/share/pceadvance
    
      41
    
      42  7z e PCEAdvance75EZ3.zip -o$pkgdir pceadvance.gba
    
      43  mv $pkgdir/pceadvance.gba $pkgdir/usr/share/pceadvance/pceadvance_ezflash.gba
    
      44
    
      45  7z e PCEAdvanceSC.zip -o$pkgdir pceadvance.gba
    
      46  mv $pkgdir/pceadvance.gba $pkgdir/usr/share/pceadvance/pceadvance_sc.gba
    
      47
    
      48  chmod -R 777 $pkgdir/usr/share/pceadvance
    
      49}
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2