xprinter-ppd

MEDIUM

maintainer CupIvan 0 votes scanned 2026-11-01 00:21:48.120785

View on AUR

Why flagged

The package downloads a .deb from a non-whitelisted, project-specific domain (xprintertech.com) which is not on standard Linux distribution or CUPS infrastructure; the deb is extracted and a binary is installed into the CUPS filter system, posing a supply-chain risk if the host were compromised or the download intercepted, though the checksum is verified.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:11 "package.rar::https://www.xprintertech.com/label-printer-linux"

Medium AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 85%): The package downloads a .deb from a non-whitelisted, project-specific domain (xprintertech.com) which is not on standard Linux distribution or CUPS infrastructure; the deb is extracted and a binary is installed into the CUPS filter system, posing a supply-chain risk if the host were compromised or the download intercepted, though the checksum is verified.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: CupIvan <mail@cupivan.ru>
    
      2pkgname=xprinter-ppd
    
      3pkgver=3.13.55
    
      4pkgrel=1
    
      5pkgdesc="CUPS driver for Xprinter XP-420B, XP-DT325B, XP-H400B, XP-TT325B series"
    
      6url="https://www.xprintertech.com/drivers-2"
    
      7arch=('x86_64')
    
      8options=('!debug')
    
      9
    
      10source=(
    
      11	"package.rar::https://www.xprintertech.com/label-printer-linux"
    
      12)
    
      13sha256sums=(
    
      14	'56da6a61aff7e9e51174e99f63debb690cf4864f5b45fe4325c02bc7f6d54d4c'
    
      15)
    
      16
    
      17build() {
    
      18	FNAME="printer-driver-xprinter_3.13.55_all.deb"
    
      19	ar xv $FNAME
    
      20	tar -xJf data.tar.xz
    
      21}
    
      22
    
      23package() {
    
      24	install -Dm755 "./opt/xprinter_printer/printer-driver-xprinter/bin/rastertosnailtspl-x64" "${pkgdir}/usr/lib/cups/filter/rastertosnailtspl-xprinter"
    
      25	cp -r ./usr ${pkgdir}
    
      26}
    
      27

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 00:21:48	Medium	2
2026-10-31 00:07:41	Medium	2
2026-10-30 00:29:30	Medium	2
2026-10-29 00:13:55	Medium	2
2026-10-28 00:06:54	Medium	2
2026-10-27 00:23:28	Medium	2
2026-10-26 00:12:40	Medium	2
2026-10-25 00:20:48	Medium	2
2026-10-24 00:14:55	Medium	2
2026-10-23 00:02:19	Medium	2
2026-10-22 00:13:10	Medium	2
2026-10-21 00:12:50	Medium	2
2026-10-20 00:10:31	Medium	2
2026-10-19 00:03:55	Medium	2
2026-10-18 00:06:55	Medium	2
2026-10-17 00:21:55	Medium	2
2026-10-16 00:12:47	Medium	2
2026-10-15 00:28:05	Medium	2
2026-10-14 00:06:47	Medium	2
2026-10-13 00:23:45	Medium	2