tencent-qq

LOW

maintainer QwerProg 0 votes scanned 2026-09-18 09:28:06.135653

View on AUR

Why flagged

The package downloads prebuilt .deb binaries from Tencent's official domain, which is a trusted source for the software; while the host is not on all whitelists, the binaries are checksummed and the package only installs legitimate application files with minor modifications for security and Wayland support.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt .deb binaries from Tencent's official domain, which is a trusted source for the software; while the host is not on all whitelists, the binaries are checksummed and the package only installs legitimate application files with minor modifications for security and Wayland support.

PKGBUILD

      1# Maintainer: Chapman <touch65536@gmail.com>
    
      2
    
      3pkgname=tencent-qq
    
      4_base_pkgver=3.2.33-52892
    
      5pkgver=3.2.33_52892
    
      6pkgrel=1
    
      7pkgdesc="Tencent QQ for Linux with native Wayland auto-detection and secure Bubblewrap sandbox"
    
      8arch=('x86_64' 'aarch64' 'loong64')
    
      9url="https://im.qq.com/linuxqq/"
    
      10license=('LicenseRef-Proprietary')
    
      11provides=('qq' 'linuxqq' 'tencent-qq-bin')
    
      12conflicts=('qq' 'linuxqq' 'linuxqq-nt-bwrap' 'tencent-qq-bin')
    
      13depends=(
    
      14    'alsa-lib'
    
      15    'at-spi2-core'
    
      16    'bubblewrap'
    
      17    'gjs'
    
      18    'gtk3'
    
      19    'libnotify'
    
      20    'nss'
    
      21)
    
      22optdepends=(
    
      23    'libappindicator-gtk3: System tray icon support'
    
      24)
    
      25options=(!strip !debug)
    
      26
    
      27source=(
    
      28    "qq.sh"
    
      29    "qq.desktop"
    
      30    "LICENSE"
    
      31)
    
      32
    
      33_url_prefix="https://qqdl.gtimg.cn/qqfile/QQNT/9.9.35/beta/1763096b"
    
      34source_x86_64=("${pkgname}-${pkgver}-amd64.deb::${_url_prefix}/linuxqq_${_base_pkgver}_amd64.deb")
    
      35source_aarch64=("${pkgname}-${pkgver}-arm64.deb::${_url_prefix}/linuxqq_${_base_pkgver}_arm64.deb")
    
      36source_loong64=("${pkgname}-${pkgver}-loongarch64.deb::${_url_prefix}/linuxqq_${_base_pkgver}_loongarch64.deb")
    
      37
    
      38noextract=("${pkgname}-${pkgver}-"{amd64,arm64,loongarch64}.deb)
    
      39
    
      40sha256sums=(
    
      41    '0ba550960aaf275d0a896bdf31ccc888cdfd5e20f4ba66b28e1e229f2f391be8'
    
      42    'a06f6e4f1674de4bc4895d8e499d83814b2fefea88b3c1cbf49621c137495ba9'
    
      43    '74ebe2e5775c75d1e62a76ea0304bc77851ee5db92e539b94af264d25ac184dc'
    
      44)
    
      45
    
      46sha256sums_x86_64=(
    
      47    '502a978f2d03af9f21acefc461f9d1d1fe09b65bad620bbfcdb589a79ac53b7e'
    
      48)
    
      49sha256sums_aarch64=(
    
      50    '806e036ee1c19ffeae22f19b5f0c2e1a7789abb5f4383bd67309995a73ea26de'
    
      51)
    
      52sha256sums_loong64=(
    
      53    '3a26ac8bba6b1a007f34d4c007ca2ccf71565cbb2dd47814eee044861d124e43'
    
      54)
    
      55
    
      56prepare() {
    
      57    local _deb_arch
    
      58    case "${CARCH}" in
    
      59        x86_64) _deb_arch="amd64" ;;
    
      60        aarch64) _deb_arch="arm64" ;;
    
      61        loong64) _deb_arch="loongarch64" ;;
    
      62    esac
    
      63
    
      64    bsdtar -xf "${pkgname}-${pkgver}-${_deb_arch}.deb" data.tar.xz
    
      65}
    
      66
    
      67package() {
    
      68    # Extract data from deb
    
      69    bsdtar -xf data.tar.xz -C "${pkgdir}"
    
      70
    
      71    # Install custom native Wayland + privacy sandbox launcher
    
      72    install -Dm755 "${srcdir}/qq.sh" "${pkgdir}/usr/bin/qq"
    
      73    ln -sf qq "${pkgdir}/usr/bin/${pkgname}"
    
      74    ln -sf qq "${pkgdir}/usr/bin/linuxqq"
    
      75
    
      76    # Install clean desktop entry
    
      77    install -Dm644 "${srcdir}/qq.desktop" "${pkgdir}/usr/share/applications/qq.desktop"
    
      78
    
      79    # Remove known vulnerable bundled libssh2
    
      80    rm -f "${pkgdir}/opt/QQ/resources/app"/libssh2.so.1 \
    
      81          "${pkgdir}/opt/QQ/resources/app/avsdk/bugly"/libssh2.so.1 2>/dev/null || true
    
      82
    
      83    # Install license
    
      84    install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      85}
    
      86

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-18 09:28:06	Low	2