steamcommunity302
MEDIUM
maintainer lingdianshiren
3 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads a prebuilt AppImage from a non-standard, project-specific domain (dogfight360.com), which is not on common trust whitelists; while the checksum is verified, the source is an unverifiable executable that could be replaced by a malicious actor if the domain were compromised.
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:27
"steamcommunity302-${pkgver}.AppImage::https://www.dogfight360.com/Usbeam/V15/Steamcommunity_302_${pkgver}_Linux_WebKit_x64.AppImage"
Medium
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 95%): The package downloads a prebuilt AppImage from a non-standard, project-specific domain (dogfight360.com), which is not on common trust whitelists; while the checksum is verified, the source is an unverifiable executable that could be replaced by a malicious actor if the domain were compromised.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: lingdianshiren <ldsrwu@foxmail.com>
2
# 上游从 tar.gz(脚本启动器)换为 linuxdeploy AppImage(Wails v3 GUI):
3
# - GUI 继续使用原始 AppImage；headless 后端从同一上游映像中解出并安装
4
# - 提权内置(pkexec/polkit/sudo transient daemon),无需旧版 launcher hack
5
# - GUI 运行时依赖 fuse2；headless 使用已打包的 CLI/Caddy/规则库
6
pkgname=steamcommunity302
7
pkgver=15.0.9
8
pkgrel=1
9
#epoch=
10
pkgdesc="羽翼城制作的Steam、Github等反代加速工具,使用s302命令启动"
11
url="https://www.dogfight360.com/blog/18682/"
12
arch=('x86_64' 'aarch64')
13
license=('CC-BY-NC-4.0')
14
# nss 提供 certutil，libnetfilter_queue 用于 DNS 重定向；python 是 s302
15
# 管理命令解析 JSON/INI 的直接依赖。headless 初始化可使用 pkexec 或 sudo。
16
depends=('fuse2' 'nss' 'libnetfilter_queue' 'polkit' 'python')
17
optdepends=(
18
# Netfilter/DNS 重定向后端(程序提示至少安装一种)
19
'iptables: Netfilter backend for DNS redirection'
20
'nftables: Netfilter backend for DNS redirection'
21
'firewalld: Netfilter backend for DNS redirection'
22
'ufw: Netfilter backend for DNS redirection'
23
'sudo: CLI privilege elevation for management commands'
24
)
25
source=('s302')
26
source_x86_64=(
27
"steamcommunity302-${pkgver}.AppImage::https://www.dogfight360.com/Usbeam/V15/Steamcommunity_302_${pkgver}_Linux_WebKit_x64.AppImage"
28
)
29
source_aarch64=(
30
"steamcommunity302-${pkgver}.AppImage::https://www.dogfight360.com/Usbeam/V15/Steamcommunity_302_${pkgver}_Linux_WebKit_arm64.AppImage"
31
)
32
sha256sums=('4ef0cef466426f5472f503f14c9762c5d512a2ab4296d0734a3d438774ce5fe8')
33
sha256sums_x86_64=('7884bbf43abe9b6202de37c133b3edfd8ff768c6c533e8d822d8aabf3a6f3fdd')
34
sha256sums_aarch64=('7884bbf43abe9b6202de37c133b3edfd8ff768c6c533e8d822d8aabf3a6f3fdd')
35
options=(!strip)
36
install=steamcommunity302.install
37
38
_install_dir="/opt/steamcommunity302"
39
prepare() {
40
local _appimage="${srcdir}/steamcommunity302-${pkgver}.AppImage"
41
42
rm -rf "${srcdir}/squashfs-root"
43
chmod 755 "${_appimage}"
44
(
45
cd "${srcdir}"
46
"${_appimage}" --appimage-extract
47
)
48
}
49
50
51
package() {
52
# 本包只装 AppImage 本体与控制命令;菜单项/图标**完全采用程序自己生成的文件**
53
# (首次运行 's302' 时由程序写入 ~/.local/share/applications/Steamcommunity_302.desktop
54
# 与 ~/.local/share/icons/hicolor/512x512/apps/com.dogfight360.steamcommunity302.png,
55
# 且每次启动幂等重写)。包再装一份自己的 desktop/图标必然与它并存或互相覆盖:
56
# 用不同 ID 会在菜单里多出两个同名条目,用同 ID 又会随程序更新而过期。
57
# 旧版本(≤15.0.5-2)装到系统目录的 desktop/图标由 steamcommunity302.install 清理。
58
install -Dm755 "${srcdir}/steamcommunity302-${pkgver}.AppImage" \
59
"${pkgdir}${_install_dir}/steamcommunity302.AppImage"
60
61
# The upstream GUI initializes this CLI through pkexec. Package its complete
62
# trusted payload so `s302 init` also works without a graphics session or a
63
# runtime FUSE mount.
64
local _headless_dir="${pkgdir}/usr/lib/${pkgname}"
65
install -Dm755 "${srcdir}/squashfs-root/usr/bin/steamcommunity_302.cli" \
66
"${_headless_dir}/steamcommunity_302.cli"
67
install -Dm755 "${srcdir}/squashfs-root/usr/bin/steamcommunity_302.caddy" \
68
"${_headless_dir}/steamcommunity_302.caddy"
69
install -Dm755 "${srcdir}/squashfs-root/usr/bin/s302-service-installer" \
70
"${_headless_dir}/s302-service-installer"
71
install -Dm755 "${srcdir}/squashfs-root/usr/bin/iframe_api" \
72
"${_headless_dir}/iframe_api"
73
install -Dm644 "${srcdir}/squashfs-root/usr/bin/iframe_api.js" \
74
"${_headless_dir}/iframe_api.js"
75
install -Dm644 "${srcdir}/squashfs-root/usr/bin/S302_rules.ini" \
76
"${_headless_dir}/S302_rules.ini"
77
install -Dm644 "${srcdir}/squashfs-root/usr/bin/s302-service-manifest.json" \
78
"${_headless_dir}/s302-service-manifest.json"
79
install -dm755 "${pkgdir}/usr/bin"
80
ln -s "/usr/lib/${pkgname}/steamcommunity_302.cli" \
81
"${pkgdir}/usr/bin/steamcommunity302-cli"
82
83
# s302 控制命令:无参/ui 开 GUI(exec AppImage),管理命令走 systemd+config
84
install -Dm755 "${srcdir}/s302" "${pkgdir}/usr/bin/s302"
85
}
86
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Medium | 2 |
| 2026-10-31 00:07:41 | Medium | 2 |
| 2026-10-30 00:29:30 | Medium | 2 |
| 2026-10-29 00:13:55 | Medium | 2 |
| 2026-10-28 00:06:54 | Medium | 2 |
| 2026-10-27 00:23:28 | Medium | 2 |
| 2026-10-26 00:12:40 | Medium | 2 |
| 2026-10-25 00:20:48 | Medium | 2 |
| 2026-10-24 00:14:55 | Medium | 2 |
| 2026-10-23 00:02:19 | Medium | 2 |
| 2026-10-22 00:13:10 | Medium | 2 |
| 2026-10-21 00:12:50 | Medium | 2 |
| 2026-10-20 00:10:31 | Medium | 2 |
| 2026-10-19 00:03:55 | Medium | 2 |
| 2026-10-18 00:06:55 | Medium | 2 |
| 2026-10-17 00:21:55 | Medium | 2 |
| 2026-10-16 00:12:47 | Medium | 2 |
| 2026-10-15 00:28:05 | Medium | 2 |
| 2026-10-14 00:06:47 | Medium | 2 |
| 2026-10-13 17:17:20 | Medium | 2 |