tencent-wechat

MEDIUM

maintainer Chapman 1 votes scanned 2026-11-02 00:26:00.633185

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:63 "${pkgname}-${pkgver}-x86_64.deb::https://dldir1v6.qq.com/weixin/Universal/Linux/WeChatLinux_x86_64.deb"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Chapman <chapman.arch@gmail.com>
    
      2# Contributor: WeChat Linux Community
    
      3
    
      4pkgname=tencent-wechat
    
      5pkgver=4.1.13.26
    
      6pkgrel=1
    
      7pkgdesc="Tencent WeChat (Linux) with native Wayland support and privacy sandbox (Community Repackage)"
    
      8arch=('x86_64')
    
      9url="https://linux.weixin.qq.com/"
    
      10license=('LicenseRef-proprietary')
    
      11depends=(
    
      12    'alsa-lib'
    
      13    'at-spi2-core'
    
      14    'bubblewrap'
    
      15    'cairo'
    
      16    'dbus'
    
      17    'expat'
    
      18    'fontconfig'
    
      19    'freetype2'
    
      20    'gcc-libs'
    
      21    'glib2'
    
      22    'glibc'
    
      23    'hicolor-icon-theme'
    
      24    'libdrm'
    
      25    'libglvnd'
    
      26    'libpulse'
    
      27    'libx11'
    
      28    'libxcb'
    
      29    'libxcomposite'
    
      30    'libxdamage'
    
      31    'libxext'
    
      32    'libxfixes'
    
      33    'libxkbcommon'
    
      34    'libxkbcommon-x11'
    
      35    'libxrandr'
    
      36    'libxrender'
    
      37    'mesa'
    
      38    'nspr'
    
      39    'nss'
    
      40    'pango'
    
      41    'xcb-util-image'
    
      42    'xcb-util-keysyms'
    
      43    'xcb-util-renderutil'
    
      44    'xcb-util-wm'
    
      45    'zlib'
    
      46)
    
      47optdepends=(
    
      48    'noto-fonts-cjk: Chinese font support'
    
      49    'ttf-twemoji: Emoji display support'
    
      50    'xdg-desktop-portal: Desktop portal integration for file dialogs and notifications'
    
      51)
    
      52provides=('wechat' 'wechat-universal')
    
      53conflicts=('wechat' 'wechat-universal-bwrap' 'wechat-bin')
    
      54options=(!debug !strip)
    
      55
    
      56source=(
    
      57    "wechat.sh"
    
      58    "wechat.desktop"
    
      59    "LICENSE"
    
      60    "DISCLAIMER"
    
      61)
    
      62source_x86_64=(
    
      63    "${pkgname}-${pkgver}-x86_64.deb::https://dldir1v6.qq.com/weixin/Universal/Linux/WeChatLinux_x86_64.deb"
    
      64)
    
      65noextract=("${pkgname}-${pkgver}-x86_64.deb")
    
      66
    
      67sha256sums=(
    
      68    '23470cf9f1b95e865623b791efaa61da9fdd40ae6a385f3eb68ff62e90e1c590'
    
      69    'd2dbcae549dbeba5feb8bf9dea1be06a767032a5078358d7e7395a9d5cb5fd0a'
    
      70    'c7d3a19e099ba6e6f33d90a35891a443fdd01c62f424e31e21c955fd03168b63'
    
      71    '3f02a485084d1d7ecd0dc6b787240fd234d168f051b60456a023e8a841d5bb4b'
    
      72)
    
      73sha256sums_x86_64=('a0db8caeee8d1e6cfe0aa5ce58710270f8d74a90ff4920f53a3fc22aa0956fe9')
    
      74
    
      75prepare() {
    
      76    bsdtar -xf "${pkgname}-${pkgver}-x86_64.deb" data.tar.xz
    
      77}
    
      78
    
      79package() {
    
      80    # Extract opt and usr hierarchies from official deb data
    
      81    bsdtar -xf data.tar.xz -C "${pkgdir}"
    
      82
    
      83    # Install pixmap for launchers that search /usr/share/pixmaps
    
      84    install -Dm644 "${pkgdir}/usr/share/icons/hicolor/256x256/apps/wechat.png" "${pkgdir}/usr/share/pixmaps/wechat.png"
    
      85
    
      86    # Replace upstream launcher with our native Wayland + privacy sandbox launcher
    
      87    install -Dm755 "${srcdir}/wechat.sh" "${pkgdir}/usr/bin/wechat"
    
      88
    
      89    # Install clean, non-universal desktop entry
    
      90    install -Dm644 "${srcdir}/wechat.desktop" "${pkgdir}/usr/share/applications/wechat.desktop"
    
      91
    
      92    # Ensure correct executable permissions
    
      93    chmod 755 "${pkgdir}/opt/wechat/wechat"
    
      94
    
      95    # Install license and disclaimer
    
      96    install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      97    install -Dm644 "${srcdir}/DISCLAIMER" "${pkgdir}/usr/share/licenses/${pkgname}/DISCLAIMER"
    
      98
    
      99    # Normalize directory permissions from upstream deb (775 -> 755)
    
      100    find "${pkgdir}" -type d -exec chmod 755 {} +
    
      101}
    
      102

Changes since previous scan

--- PKGBUILD @ 2026-10-20 00:10
+++ PKGBUILD @ 2026-11-02 00:26
@@ -2,8 +2,8 @@
 # Contributor: WeChat Linux Community
 
 pkgname=tencent-wechat
-pkgver=4.1.13.23
-pkgrel=2
+pkgver=4.1.13.26
+pkgrel=1
 pkgdesc="Tencent WeChat (Linux) with native Wayland support and privacy sandbox (Community Repackage)"
 arch=('x86_64')
 url="https://linux.weixin.qq.com/"
@@ -70,7 +70,7 @@
     'c7d3a19e099ba6e6f33d90a35891a443fdd01c62f424e31e21c955fd03168b63'
     '3f02a485084d1d7ecd0dc6b787240fd234d168f051b60456a023e8a841d5bb4b'
 )
-sha256sums_x86_64=('b7d0f8d53e9f648bc2c77a6096a04100d008f2d9f0d3988a2a4859b5992aca0a')
+sha256sums_x86_64=('a0db8caeee8d1e6cfe0aa5ce58710270f8d74a90ff4920f53a3fc22aa0956fe9')
 
 prepare() {
     bsdtar -xf "${pkgname}-${pkgver}-x86_64.deb" data.tar.xz

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-02 00:26:00	Medium	1
2026-11-01 00:21:48	Medium	1
2026-10-31 00:07:41	Medium	1
2026-10-30 00:29:30	Medium	1
2026-10-29 00:13:55	Medium	1
2026-10-28 00:06:54	Medium	1
2026-10-27 00:23:28	Medium	1
2026-10-26 00:12:40	Medium	1
2026-10-25 00:20:48	Medium	1
2026-10-24 00:14:55	Medium	1
2026-10-23 00:02:19	Medium	1
2026-10-22 00:13:10	Medium	1
2026-10-21 00:12:50	Medium	1
2026-10-20 19:28:13	Medium	1
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2