Benign Download

minimal-x86-64/nixos-minimal-25.05.813814.ac62194c3917-x86_64-linux/nix-store.squashfs.d/crs1ks6b3513ymkmxn8g4iivxz95gvkf-nixos-25.05.813814.ac62194c3917/nixos/pkgs/by-name/je/jenkins

Shell invokes the curl commandcurl command uses silent or fail flags

SHA-256a3fc7e8bc3c6d38ddfa0eaa39c9ef6f88979d242871a67444fceca1568d8c0c1

Evidence

Shell invokes mkdir command lines 12–39

⋯17 lines
29
30  buildCommand = ''
31    mkdir -p "$out/bin" "$out/share" "$out/webapps"
32
33    cp "$src" "$out/webapps/jenkins.war"
34
35    # Create the `jenkins-cli` command.
36    ${openjdk}/bin/jar -xf "$src" WEB-INF/lib/cli-${finalAttrs.version}.jar \
37      && mv WEB-INF/lib/cli-${finalAttrs.version}.jar "$out/share/jenkins-cli.jar"
38
39    makeWrapper "${openj …

curl command names a remote HTTP(S) URL lines 52–69

⋯8 lines
60      }
61
62      core_json="$(curl -s --fail --location https://updates.jenkins.io/stable/update-center.actual.json | jq .core)"
63      oldVersion=$(nix-instantiate --eval -E "with import ./. {}; lib.getVersion jenkins" | tr -d '"')
64
65      version="$(jq -r .version <<<$core_json)"
⋯4 lines