picoscope7beta

maintainer Schorsch · 5 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a Debian package from a plausibly official Pico Technology subdomain (labs.picotech.com) for building PicoScope 7; while the host is not a standard one, it is related to the vendor and the package installs only data and binaries from that source, with no evidence of remote code execution or obfuscation.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a Debian package from a plausibly official Pico Technology subdomain (labs.picotech.com) for building PicoScope 7; while the host is not a standard one, it is related to the vendor and the package installs only data and binaries from that source, with no evidence of remote code execution or obfuscation.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:30 source=("https://labs.picotech.com/rc/picoscope7/debian/pool/main/p/picoscope/picoscope_${pkgver//_/-}_amd64.deb")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Schorsch <wsixcde+aur at gmail dot com>
    
      2# Thanks to <mti at tillenius dot com> whose packages the ps7b packages were based on
    
      3pkgname=picoscope7beta
    
      4pkgver=7.2.28.9963
    
      5pkgrel=1
    
      6pkgdesc="PicoScope 7 Test and Measurment Early Access"
    
      7arch=('x86_64')
    
      8url="https://oem.picotech.com/p7beta/download"
    
      9license=('custom')
    
      10groups=()
    
      11depends=(ttf-roboto ps7b_libpicoipp ps7b_libpicocv desktop-file-utils which fuse2)
    
      12optdepends=('ps7b_libps2000: Support for PicoScope 2000 series'
    
      13    'ps7b_libps2000a: Support for PicoScope 2000a series'
    
      14    'ps7b_libps3000: Support for PicoScope 3000 series'
    
      15    'ps7b_libps3000a: Support for PicoScope 3000a series'
    
      16    'ps7b_libps4000: Support for PicoScope 4000 series'
    
      17    'ps7b_libps4000a: Support for PicoScope 4000a series'
    
      18    'ps7b_libps5000: Support for PicoScope 5000 series'
    
      19    'ps7b_libps5000a: Support for PicoScope 5000a series'
    
      20    'ps7b_libps6000: Support for PicoScope 6000 series'
    
      21    'ps7b_libps6000a: Support for PicoScope 6000a series'
    
      22    )
    
      23provides=(picoscope7)
    
      24conflicts=(picoscope7)
    
      25replaces=()
    
      26backup=()
    
      27options=(!strip)
    
      28install=$pkgname.install
    
      29changelog=
    
      30source=("https://labs.picotech.com/rc/picoscope7/debian/pool/main/p/picoscope/picoscope_${pkgver//_/-}_amd64.deb")
    
      31md5sums=('41872009dccfd5a23da2868e4362b4e3')
    
      32
    
      33package() {
    
      34    tar -xf data.tar.* -C "${pkgdir}"
    
      35    chmod -R go-w $pkgdir
    
      36    chown -R root:root $pkgdir
    
      37
    
      38    #  mkdir -p $pkgdir/usr/bin
    
      39    #  ln -s /opt/picoscope/bin/picoscope $pkgdir/usr/bin/picoscope
    
      40
    
      41    #  mkdir -p $pkgdir/opt/picoscope/scripts
    
      42    #  tar -xf control.tar.* -C "${pkgdir}/opt/picoscope/scripts" ./postinst
    
      43    # #  mv "${pkgdir}/opt/picoscope/scripts/postinst" "${pkgdir}/opt/picoscope/scripts/${pkgname}_postinst"
    
      44
    
      45    tar -xf control.tar.* -C "${pkgdir}/opt/picoscope" ./copyright
    
      46    install -Dm644 -t "${pkgdir}/usr/share/licenses/${pkgname}" "${pkgdir}/opt/picoscope/copyright"
    
      47}
    
      48

Changes since previous scan

--- PKGBUILD @ 2026-07-30 00:17
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,7 +1,7 @@
 # Maintainer: Schorsch <wsixcde+aur at gmail dot com>
 # Thanks to <mti at tillenius dot com> whose packages the ps7b packages were based on
 pkgname=picoscope7beta
-pkgver=7.2.26.9659
+pkgver=7.2.28.9963
 pkgrel=1
 pkgdesc="PicoScope 7 Test and Measurment Early Access"
 arch=('x86_64')
@@ -28,7 +28,7 @@
 install=$pkgname.install
 changelog=
 source=("https://labs.picotech.com/rc/picoscope7/debian/pool/main/p/picoscope/picoscope_${pkgver//_/-}_amd64.deb")
-md5sums=('26e541bfa47a235d306ccb1249dd98cc')
+md5sums=('41872009dccfd5a23da2868e4362b4e3')
 
 package() {
     tar -xf data.tar.* -C "${pkgdir}"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 03:13:55	MEDIUM	1
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2