The malicious commit has been deleted and the associated AUR account has been banned.
Thanks for the report!
Search Criteria
Package Details: telegram-tdlib-purple-git 0.8.1.r523.d220fa8-2
Package Actions
| Git Clone URL: | https://aur.archlinux.org/telegram-tdlib-purple-git.git (read-only, click to copy) |
|---|---|
| Package Base: | telegram-tdlib-purple-git |
| Description: | libpurple/pidgin Telegram plugin implemented using official tdlib client library |
| Upstream URL: | https://github.com/BenWiederhake/tdlib-purple/ |
| Keywords: | bitlbee libpurple pidgin tdlib telegram |
| Licenses: | GPL2, LGPL2.1, custom:FTL, custom:PIX, custom:RPD, custom:SKIA, custom:STB |
| Conflicts: | telegram-tdlib-purple |
| Provides: | telegram-tdlib-purple |
| Submitter: | mk-fg |
| Maintainer: | majlisforslund |
| Last Packager: | Antiz |
| Votes: | 10 |
| Popularity: | 0.062909 |
| First Submitted: | 2020-06-27 20:23 (UTC) |
| Last Updated: | 2026-06-10 16:45 (UTC) |
Dependencies (7)
- libpng (libpng-gitAUR, libpng-apngAUR)
- libpurpleAUR (libpurple-minimalAUR, pidgin-hgAUR, pidgin-miniAUR, libpurple-privacyAUR, libpurple-gnutlsAUR)
- libtgvoipAUR
- libwebp (libwebp-gitAUR)
- cmake (cmake3AUR, cmake-gitAUR) (make)
- git (git-gitAUR, git-glAUR, git-wd40AUR) (make)
- gperf (gperf-gitAUR) (make)
Required by (0)
Sources (2)
Antiz commented on 2026-06-10 16:46 (UTC) (edited on 2026-06-10 16:47 (UTC) by Antiz)
mk-fg commented on 2026-06-10 15:50 (UTC) (edited on 2026-06-10 15:53 (UTC) by mk-fg)
MALWARE WARNING:
User majlisforslund picked this package up from being orphaned and added random "npm install" command to it, presumably installing compromised/malware packages.
No idea how/where to escalate such issues on AUR though, as "Submit Request" here is only to package maintainer, who in this case seem to be likely a malicious party to be reported.
Koli commented on 2025-09-30 10:09 (UTC)
Thanks for the reply, and sorry, indeed it's the wrong package. I raised it on that one, I see the upstream project has a pull request for it too, but looks fairly abandoned. It's my first go at pidgin, so not yet sure what I need, just trying stuff.
mk-fg commented on 2025-09-30 08:53 (UTC)
Also fwiw, can't build libtgvoip here either, with a ton of errors popping-up.
I think it just needs updating to use a newer git snapshot, where such issues are likely fixed, as it haven't been since 2022.
If you don't need its functionality (voice chats? dunno whether it works in pidgin), can add -DNoVoip=True to cmake command in PKGBUILD to build without that lib/dependency (like it's done in e.g. https://aur.archlinux.org/packages/telegram-tdlib-purple-minimal-git ).
mk-fg commented on 2025-09-30 08:46 (UTC)
I think you filed this issue against wrong package - TgVoip.cpp file is in a separate libtgvoip, which is a dependency of this one, but its build can't be patched from here.
Link to libtgvoip package: https://aur.archlinux.org/packages/libtgvoip
Koli commented on 2025-09-29 19:16 (UTC)
I am getting some errors compiling, starting with
In file included from TgVoip.cpp:1:
TgVoip.h:11:5: error: 'uint16_t' does not name a type
11 | uint16_t port = 0;
| ^~~~~~~~
TgVoip.h:8:1: note: 'uint16_t' is defined in header '<cstdint>'; this is probably fixable by adding '#include <cstdint>'
PhotonX commented on 2025-05-31 14:23 (UTC)
Thanks, it was actually exactly the issue, I was too impatient and assumed that something got stuck, while it actually just needed a very long time to complete the linking!
mk-fg commented on 2025-05-31 12:06 (UTC) (edited on 2025-05-31 13:12 (UTC) by mk-fg)
Oh, I think you might mean "stuck" as in "taking too long wall-clock time to move past that point" - that seem to be unfortunately normal for td library build.
It takes plenty of cpu (and memory in some places) to build (iirc like 30min on 4 cores of somewhat old Ryzen 5600X with 32G RAM here), so I think you can either wait or e.g. add more zram, if memory/swapping is what slows it down to a crawl.
Haven't looked into which parts of the build take what wrt resources, but maybe "run_all_tests" part is non-critical and you can also disable it? Quickly checking via ccmake, I don't see any obvious on/off flag for it, though maybe it's documented how to do it, or can probably patch it out too. Can also just leave it running overnight, as mentioned, if there isn't any more difficult bottleneck than just CPU power/time.
Another option might be using pre-built td library for the plugin, e.g. downloaded from somewhere trustworthy (and working with Arch libs), and use path to where it's installed with -DTd_DIR= in PKGBUILD. This plugin links it statically, so it won't be needed after the build.
Wrt sqlite3.c I also get those warnings here, seem to be non-critical:
[ 36%] Building CXX object CMakeFiles/tdcore.dir/td/telegram/AttachMenuManager.cpp.o
/usr/src/debug/telegram-tdlib-purple-git/telegram-tdlib-purple-git/td/sqlite/sqlite/sqlite3.c: In function ‘tdsqlite3SelectNew’:
/usr/src/debug/telegram-tdlib-purple-git/telegram-tdlib-purple-git/td/sqlite/sqlite/sqlite3.c:131688:10: warning: function may return address of local variable [-Wreturn-local-addr]
/usr/src/debug/telegram-tdlib-purple-git/telegram-tdlib-purple-git/td/sqlite/sqlite/sqlite3.c:131648:10: note: declared here
[ 36%] Building CXX object CMakeFiles/tdcore.dir/td/telegram/AudiosManager.cpp.o
mk-fg commented on 2025-05-31 11:50 (UTC)
Hm, worked for me yesterday, but I probably haven't ran "pacman -Syu" in a week or so...
But also, given that it's on a linker step, maybe try nuking build-cache in ~/.cache/yay/telegram-tdlib-purple-git/src/telegram-tdlib-purple-git/td/ or just whole ~/.cache/yay/telegram-tdlib-purple-git - seem to happen to me sometimes too when build tools update, but dunno if it's the same type of issue.
PhotonX commented on 2025-05-31 11:44 (UTC)
The build gets stuck at
[100%] Linking CXX executable run_all_tests
/home/photon/.cache/yay/telegram-tdlib-purple-git/src/telegram-tdlib-purple-git/td/sqlite/sqlite/sqlite3.c: In Funktion »tdsqlite3SelectNew«:
/home/photon/.cache/yay/telegram-tdlib-purple-git/src/telegram-tdlib-purple-git/td/sqlite/sqlite/sqlite3.c:131688:10: Warnung: Funktion liefert möglicherweise Adresse einer lokalen Variablen zurück [-Wreturn-local-addr]
131688 | return pNew;
| ^
/home/photon/.cache/yay/telegram-tdlib-purple-git/src/telegram-tdlib-purple-git/td/sqlite/sqlite/sqlite3.c:131648:10: Anmerkung: hier deklariert
131648 | Select standin;
| ^
Pinned Comments
mk-fg commented on 2021-12-07 14:44 (UTC) (edited on 2023-09-23 21:26 (UTC) by mk-fg)
If you're getting error like this on login:
Check https://core.telegram.org/api/obtaining_api_id URL, for generating your own api_id/api_hash values (only a couple clicks), and specify those in the plugin parameters.