Benign Download

minimal-x86-64/nixos-minimal-25.05.813814.ac62194c3917-x86_64-linux/nix-store.squashfs.d/crs1ks6b3513ymkmxn8g4iivxz95gvkf-nixos-25.05.813814.ac62194c3917/nixos/pkgs/by-name/vm/vmware-horizon-client

Shell invokes the curl commandShell changes working directory

SHA-25620f6d59611f533dfe4e002446a39524150db71eb1a492f7f648fca1aa885cedc

Evidence

Shell invokes the curl command lines 1–18

1#!/usr/bin/env nix-shell
2#!nix-shell -p curl -p jq -p common-updater-scripts -i bash
3set -e
4
5entryPointURL='https://customerconnect.omnissa.com/channel/public/api/v1.0/products/getRelatedDLGList?locale=en_US&category=desktop_end_user_computing&product=vmware_horizon_clients&version=horizon_8&dlgType=PRODUCT_BINARY'
6
7function getTarballMetaUrl {
8    curl "$entryPointURL" | jq -r '
9        .dlgEditionsLists | .[] | select(.name | contains("Client for Linux")) |
10        .dlgList | .[] | select(.name | contains("tarball version")) |
11        @uri "https://customerconnect.omnissa.com/channel/public/api/v1.0/dlg/details?locale=en_US&downloadGroup=\(.code)&productId=\(.productId)&rPId=\(.releasePackageId)"
12    '
13}
14
15meta="$( curl "$(getTarballMetaUrl)" | jq ".downloadFiles | .[]" )"
16
17ver="$( echo "$meta" | jq -r .version )"
18url="$( echo "$meta"  …

Shell changes working directory lines 22–27

22echo "version: $ver"
23echo "tar url: $url"
24echo " sha256: $sum"
25
26cd "$(dirname "$0")/../../../../.."
27update-source-version vmware-horizon-client.unwrapped "$ver" "$sum" "$url"