False positive: Anomalous package hides outbound data exfiltration #2

TomHale commented 2026年07月03日 11:54:42 +02:00

False positive at:
https://lab.atomdrift.org/file/e0436d54086f90d97efffe587ae5f22452d43f80f85b6957c153ed381adf0edd

Anomalous package hides outbound data exfiltration.

I can't see any evidence of this below:

# Maintainer: Markus Weimar <mail@markusweimar.de>
pkgname=ttf-iosevka-curly-slab
pkgver=34.7.0
pkgrel=1
pkgdesc='Typeface family designed for coding, terminal use and technical documents.'
arch=('any')
url='https://typeof.net/Iosevka/'
license=('OFL')
source=("https://github.com/be5invis/Iosevka/releases/download/v${pkgver}/PkgTTF-IosevkaCurlySlab-${pkgver}.zip"
 "${pkgname}-${pkgver}-${pkgrel}-LICENSE.md::https://raw.githubusercontent.com/be5invis/Iosevka/v${pkgver}/LICENSE.md")
sha256sums=('97d10cd3052cf30a3bc5bac4434d2937220e3343c4304eca9bd5c2259b10f5bc'
 '4ba53c7c1cb39279aae5f8d7d22054c485c71169920e5a36ed098b115e2e3c5d')
package() {
 install -d ${pkgdir}/usr/share/fonts/TTF/
 install -m644 *.ttf ${pkgdir}/usr/share/fonts/TTF/
 install -D -m644 ${pkgname}-${pkgver}-${pkgrel}-LICENSE.md ${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.md
}

False positive at: https://lab.atomdrift.org/file/e0436d54086f90d97efffe587ae5f22452d43f80f85b6957c153ed381adf0edd `Anomalous package hides outbound data exfiltration`. I can't see any evidence of this below: ``` # Maintainer: Markus Weimar <mail@markusweimar.de> pkgname=ttf-iosevka-curly-slab pkgver=34.7.0 pkgrel=1 pkgdesc='Typeface family designed for coding, terminal use and technical documents.' arch=('any') url='https://typeof.net/Iosevka/' license=('OFL') source=("https://github.com/be5invis/Iosevka/releases/download/v${pkgver}/PkgTTF-IosevkaCurlySlab-${pkgver}.zip" "${pkgname}-${pkgver}-${pkgrel}-LICENSE.md::https://raw.githubusercontent.com/be5invis/Iosevka/v${pkgver}/LICENSE.md") sha256sums=('97d10cd3052cf30a3bc5bac4434d2937220e3343c4304eca9bd5c2259b10f5bc' '4ba53c7c1cb39279aae5f8d7d22054c485c71169920e5a36ed098b115e2e3c5d') package() { install -d ${pkgdir}/usr/share/fonts/TTF/ install -m644 *.ttf ${pkgdir}/usr/share/fonts/TTF/ install -D -m644 ${pkgname}-${pkgver}-${pkgrel}-LICENSE.md ${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.md } ```

tstromberg commented 2026年07月04日 18:20:56 +02:00

Thanks for the heads up! This is a great test case for us to use. I'll make sure it gets fixed for the v2.2.0 release.

Thanks for the heads up! This is a great test case for us to use. I'll make sure it gets fixed for the v2.2.0 release.

tstromberg commented 2026年07月06日 22:37:07 +02:00

Fixed! Thank you for reporting this false-positive.

$ atomscan url https://aur.archlinux.org/cgit/aur.git/snapshot/ttf-iosevka-curly-slab.tar.gz
...
────────────────────────────────────────────────────
 ✓ 1 files scanned, all clean 1.3s

Fixed! Thank you for reporting this false-positive. ``` $ atomscan url https://aur.archlinux.org/cgit/aur.git/snapshot/ttf-iosevka-curly-slab.tar.gz ... ──────────────────────────────────────────────────── ✓ 1 files scanned, all clean 1.3s ```