trae-cn-desktop-bin
LOW
maintainer nukiyoam
4 votes
scanned 2026-11-02 00:26:00.633185
Why flagged
The package downloads a prebuilt binary from a non-whitelisted but plausibly official domain (trae.com.cn), which is owned by the software vendor; the source is verified via matching sha256sums, and no code execution or obfuscation occurs during install.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt binary from a non-whitelisted but plausibly official domain (trae.com.cn), which is owned by the software vendor; the source is verified via matching sha256sums, and no code execution or obfuscation occurs during install.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:34
"${_pkgname}-${pkgver}-${CARCH}.tar.gz::https://lf-cdn.trae.com.cn/obj/trae-com-cn/pkg/app/releases/stable/${pkgver}/linux/TraeCode_CN-linux-x64.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: nukiyoam <329748113[at]qq[dot]com>
2
3
# 参考 https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=visual-studio-code-bin
4
5
pkgname=trae-cn-desktop-bin
6
_pkgname=trae-cn
7
pkgver=2.3.67912
8
pkgrel=1
9
pkgdesc="字节跳动推出的AI编程IDE（Trae CN）"
10
arch=('x86_64' 'aarch64')
11
url="https://www.trae.cn/"
12
license=('custom')
13
# Upstream has signature verification for extensions and stripping breaks it
14
# See https://github.com/microsoft/vscode/issues/223455#issuecomment-2610001754
15
options=('!strip')
16
install=$pkgname.install
17
18
# lsof: needed for terminal splitting, see https://github.com/Microsoft/vscode/issues/62991
19
# xdg-utils: needed for opening web links with xdg-open
20
depends=(libxkbfile gnupg gtk3 libsecret nss gcc-libs libnotify libxss glibc lsof shared-mime-info xdg-utils alsa-lib)
21
22
optdepends=(
23
'glib2: Needed for move to trash functionality'
24
'libdbusmenu-glib: Needed for KDE global menu'
25
'org.freedesktop.secrets: Needed for settings sync'
26
# See https://github.com/MicrosoftDocs/live-share/issues/4650
27
'icu69: Needed for live share'
28
)
29
30
provides=("trae-cn=${pkgver}")
31
conflicts=('trae-cn' 'trae-cn-bin')
32
33
source_x86_64=(
34
"${_pkgname}-${pkgver}-${CARCH}.tar.gz::https://lf-cdn.trae.com.cn/obj/trae-com-cn/pkg/app/releases/stable/${pkgver}/linux/TraeCode_CN-linux-x64.tar.gz"
35
"${_pkgname}.desktop"
36
"${_pkgname}-url-handler.desktop"
37
"${_pkgname}-startup.sh"
38
)
39
40
source_aarch64=(
41
"${_pkgname}-${pkgver}-${CARCH}.tar.gz::https://lf-cdn.trae.com.cn/obj/trae-com-cn/pkg/app/releases/stable/${pkgver}/linux/TraeCode_CN-linux-arm64.tar.gz"
42
"${_pkgname}.desktop"
43
"${_pkgname}-url-handler.desktop"
44
"${_pkgname}-startup.sh"
45
)
46
47
sha256sums_x86_64=('a9cfcdefc6f8e700afaa3ab153977a67ab8bf928208d83231b814d24a01a689f'
48
'30c7bcb0c9d3afcdd751f114b154ad09f2fea481abb2c431469368c6d6069b1c'
49
'e95823c65fb48674878ebb8c99719fbcf3eb9ccb89e61e4d37bd0b5be300b168'
50
'cd3a00a606b14d2ab494ad98b1c3926ceaf0c46f226b258f7e79c55b61dbd395')
51
sha256sums_aarch64=('a9cfcdefc6f8e700afaa3ab153977a67ab8bf928208d83231b814d24a01a689f'
52
'30c7bcb0c9d3afcdd751f114b154ad09f2fea481abb2c431469368c6d6069b1c'
53
'e95823c65fb48674878ebb8c99719fbcf3eb9ccb89e61e4d37bd0b5be300b168'
54
'cd3a00a606b14d2ab494ad98b1c3926ceaf0c46f226b258f7e79c55b61dbd395')
55
56
57
package() {
58
install -d "${pkgdir}/opt/${_pkgname}"
59
install -d "${pkgdir}/usr/bin"
60
install -d "${pkgdir}/usr/share/"{applications,pixmaps,mime/packages,licenses/${_pkgname}}
61
bsdtar -xf "${srcdir}/${_pkgname}-${pkgver}-${CARCH}.tar.gz" -C "${pkgdir}/opt/${_pkgname}"
62
chmod 4755 "${pkgdir}/opt/${_pkgname}/chrome-sandbox"
63
install -Dm644 "${srcdir}/${_pkgname}.desktop" "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
64
install -Dm644 "${srcdir}/${_pkgname}-url-handler.desktop" "${pkgdir}/usr/share/applications/${_pkgname}-url-handler.desktop"
65
install -Dm644 "${srcdir}/resources/app/resources/linux/code.png" "${pkgdir}/usr/share/pixmaps/${_pkgname}.png"
66
install -Dm644 "${srcdir}/resources/app/LICENSE.txt" "${pkgdir}/usr/share/licenses/${_pkgname}/LICENSE.txt"
67
install -Dm644 "${srcdir}/resources/completions/bash/${_pkgname}" "${pkgdir}/usr/share/bash-completion/completions/${_pkgname}"
68
install -Dm644 "${srcdir}/resources/completions/zsh/_${_pkgname}" "${pkgdir}/usr/share/zsh/site-functions/_${_pkgname}"
69
install -m755 "${srcdir}/${_pkgname}-startup.sh" "${pkgdir}/usr/bin/${_pkgname}"
70
71
# 暂时修复一下工作区索引不能成功构建的问题
72
rm -rf "${pkgdir}/opt/${_pkgname}/resources/app/modules/ckg/binary/libstdc++.so.6"
73
}
74
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-02 00:26:00 | Low | 2 |
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |