sys-pc-tool

maintainer antoine163 · 2 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged This PKGBUILD downloads a prebuilt binary .deb from the vendor's own website (syride.com), extracts it, and installs the binaries directly. The vendor host is the official upstream (url matches source domain), so this is not a personal/unofficial host. However, the package installs prebuilt closed-source binaries with no source build, and uses only an MD5 checksum (cryptographically weak, no SHA256/b2). The real concern is that prebuilt binaries from any host — even the official vendor — represent a supply-chain risk if the vendor site is compromised or the binary is silently updated. The license is 'unknown', suggesting proprietary software. This is a legitimate medium-risk pattern: executed closed-source binary from a vendor host with only MD5 verification, not a false positive, but also not clearly malicious.

Triggered rules

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=("https://www.syride.com/downloads/$pkgname-$pkgver-$pkgrel""_amd64.deb")

MEDIUM AI review llm_review

An AI model (anthropic/claude-4.6-sonnet-20260217) reviewed this and agrees it is MEDIUM (confidence 72%): This PKGBUILD downloads a prebuilt binary .deb from the vendor's own website (syride.com), extracts it, and installs the binaries directly. The vendor host is the official upstream (url matches source domain), so this is not a personal/unofficial host. However, the package installs prebuilt closed-source binaries with no source build, and uses only an MD5 checksum (cryptographically weak, no SHA256/b2). The real concern is that prebuilt binaries from any host — even the official vendor — represent a supply-chain risk if the vendor site is compromised or the binary is silently updated. The license is 'unknown', suggesting proprietary software. This is a legitimate medium-risk pattern: executed closed-source binary from a vendor host with only MD5 verification, not a false positive, but also not clearly malicious.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Antoine Maleyrie <antoine.maleyrie@gmail.com>
    
      2
    
      3pkgname=sys-pc-tool
    
      4pkgver=6.32
    
      5pkgrel=1
    
      6
    
      7pkgdesc="SYS PC Tool is a software for downloading flights recorded inside Syrides instruments."
    
      8arch=('x86_64')
    
      9url="https://www.syride.com/"
    
      10license=('unknown')
    
      11depends=('glibc>=2.17' 'krb5>=1.10' 'libldap' 'gtk2' 'libusb' 'libxml2' 'p11-kit' 'openssl' 'libcurl-gnutls')
    
      12#install=
    
      13source=("https://www.syride.com/downloads/$pkgname-$pkgver-$pkgrel""_amd64.deb")
    
      14md5sums=('d044cf3d89c6bca437ae2d665c564f61')
    
      15
    
      16prepare() {
    
      17    tar -xf data.tar.xz
    
      18}
    
      19
    
      20package() {
    
      21    cp -r "usr/local/" "$pkgdir/usr/"
    
      22    
    
      23    mkdir -p "$pkgdir/usr/local/share/"
    
      24    cp -r "usr/local/share/syride/" "$pkgdir/usr/local/share/"
    
      25    
    
      26    mkdir -p "$pkgdir/etc/udev/rules.d/"
    
      27    cp "lib/udev/rules.d/96-syride.rules" "$pkgdir/etc/udev/rules.d/"
    
      28    
    
      29    # To update udev ruls:
    
      30    # $ udevadm control --reload
    
      31    # $ udevadm trigger
    
      32}
    
      33

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	2
2026-08-02 00:16:08	MEDIUM	2
2026-08-01 00:11:18	MEDIUM	2
2026-07-31 00:14:10	MEDIUM	2
2026-07-30 00:17:23	MEDIUM	2
2026-07-29 00:25:53	MEDIUM	2
2026-07-28 00:07:28	MEDIUM	2
2026-07-27 00:24:32	MEDIUM	2
2026-07-26 00:07:32	MEDIUM	2
2026-07-25 00:13:44	MEDIUM	2
2026-07-24 00:02:28	MEDIUM	2
2026-07-23 00:14:47	MEDIUM	2
2026-07-22 00:29:32	MEDIUM	2
2026-07-21 00:24:15	MEDIUM	2
2026-07-20 00:19:49	MEDIUM	2
2026-07-19 00:17:08	MEDIUM	2
2026-07-18 00:14:48	MEDIUM	2
2026-07-17 00:06:16	MEDIUM	2
2026-07-16 00:05:41	MEDIUM	2
2026-07-15 00:09:25	MEDIUM	2