Benign arch Download

brave-bin 1:1.91.178-1

Legitimate browser package build script

Desktop entry Terminal=falseShell command-substitution syntax

SHA-256816919d9f1c043f527b5b62e3d7e389831d106832bbde651ee386792f8a4c50b

URLhttps://aur.archlinux.org/cgit/aur.git/snapshot/brave-bin.tar.gz

Evidence

GitHub releases download URL PKGBUILD · lines 30–33

30options=(!strip)
31source=($pkgname.sh brave-browser.desktop)
32source_x86_64=(${pkgname}-${pkgver}-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v${pkgver}/brave-browser-${pkgver}-linux-amd64.zip)
33source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v${pkgver}/brave-browser-${pkgver}-linux-arm64.zip)

chmod +x (make executable) PKGBUILD · lines 42–45

mkdir -p brave
bsdtar -xf "$pkgname-$pkgver-$CARCH.zip" -C brave
chmod +x brave/brave
45}

Shell chmod 7xx (executable) PKGBUILD · lines 51–52

51	# allow firejail users to get the suid sandbox working
52	chmod 4755 "$pkgdir/opt/brave-bin/chrome-sandbox"

Shell path to a dot-entry under $HOME brave-bin.sh · lines 1–25

1#!/usr/bin/env bash
2
3XDG_CONFIG_HOME="${XDG_CONFIG_HOME:-"${HOME}/.config"}"
4
5CONF_FILE="${XDG_CONFIG_HOME}/brave-flags.conf"
⋯5 lines
11fi
12
13for CONF_LINE in "${CONF_LIST[@]}"
14do
15	if ! [[
⋯7 lines
23export CHROME_VERSION_EXTRA='stable'
24
25exec /opt/brave-bin/brave "${FLAG_LIST[@]}" "${@}"

Command emits terminal control sequences .pre-commit · lines 1–13

1#!/bin/bash
2
3# fix environment of githooks
4unset GIT_DIR
5# if PKGBUILD has been altered, update .SRCINFO
6for path in $(git diff --name-only --cached --diff-filter=AM); do
7    if [[ "${path}" =~ .*PKGBUILD$ ]]; then
8        echo -e "\e[01;32m *** Generating and adding .SRCINFO for ${path} ***\e[00m"
9        (makepkg --printsrcinfo > "${PWD}"/.SRCINFO) || exit 1
10        git update-index
11        git add "${PWD}"/.SRCINFO
12    fi
13done

No evidence locations were recorded for this file. Raw result