Loading npm security reports…

@feiyang666/dsh-mobile-remote@1.7.1: Malicious npm security | LPM Firewall

registry / @feiyang666/dsh-mobile-remote / 1.7.1

@feiyang666/dsh-mobile-remote@1.7.1

DeepSeek Harness mobile remote-control plugin: LAN/external remote control (QR / on-off toggle / remote-access password gate), rich telemetry (expandable device details, system CPU/memory/load, DSH app state: version/sessions/workspaces/plugins/models), r

AI Security Review

scanned 19d ago · by lpm-firewall-ai

A reachable plugin endpoint accepts an unrestricted tunnel-server URL. It downloads an executable from that server, saves it locally, and starts it.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

A request to POST /__dsh_remote/external/start after the plugin is loaded; a LAN HTTP request is treated as authorized.

Impact

A network caller can cause arbitrary code from an attacker-controlled server to run with the DSH host process permissions.

Mechanism

Unvalidated remote binary download followed by child-process execution.

Attack narrative

When loaded, the plugin registers an external-start HTTP route. Its request body can select serverBase. The server response path is used to download frpc without an allowlist, signature, or hash verification; the bytes are written executable and spawned. The authorization function accepts all non-HTTPS requests and also accepts HTTPS requests when no password is configured, so this is not restricted to a deliberate local administrator action. This creates a concrete remote-code-execution path.

AI rationale

This is a concrete, reachable arbitrary binary execution chain, not merely ordinary tunnel networking. The absence of an npm install hook does not mitigate the runtime remote-code-execution path.

Evidence

lib/index.jslib/external.js.dsh/plugins/dsh-mobile-remote/external/frpc.dsh/plugins/dsh-mobile-remote/external/frpc.toml

Network endpoints3

api.deepseekharness.desktop.cwj666.top

Source & flagged code

7 flagged · loading source

lib/index.jsView file

34} from 'node:fs' L35: import { spawn } from 'node:child_process' L36: import qrcode from './qrcode.js'

High

Child Process

Package source references child process execution.

lib/index.jsView on unpkg · L34

lib/external.jsView file

8// L9: // 运行时依赖：Node 内置模块 + `ws`（WebSocket 长连接接收中转服务状态推送， L10: // 替代高频轮询；ws 依赖缺失时自动回退 HTTP 低频查询）。frpc 二进制由中转服务提供或用户本地放置。 ... L24: } from 'node:fs' L25: import { spawn } from 'node:child_process' L26: import { createWsStatusClient } from './ws-client.js' ... L35: (body && typeof body.serverBase === 'string' && body.serverBase.trim()) L36: || process.env.DSH_REMOTE_SERVER L37: || DEFAULT_SERVER_BASE ... L42: function externalDir() { L43: const home = process.env.DSH_HOME || join(homedir(), '.dsh') L44: return join(home, 'plugins', 'dsh-mobile-remote', 'external')

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

lib/external.jsView on unpkg · L8

8Trigger-reachable chain: manifest.main -> lib/index.js -> lib/external.js L8: // L9: // 运行时依赖：Node 内置模块 + `ws`（WebSocket 长连接接收中转服务状态推送， L10: // 替代高频轮询；ws 依赖缺失时自动回退 HTTP 低频查询）。frpc 二进制由中转服务提供或用户本地放置。 ... L24: } from 'node:fs' L25: import { spawn } from 'node:child_process' L26: import { createWsStatusClient } from './ws-client.js' ... L35: (body && typeof body.serverBase === 'string' && body.serverBase.trim()) L36: || process.env.DSH_REMOTE_SERVER L37: || DEFAULT_SERVER_BASE ... L42: function externalDir() { L43: const home = process.env.DSH_HOME || join(homedir(), '.dsh') L44: return join(home, 'plugins', 'dsh-mobile-remote', 'external')

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

lib/external.jsView on unpkg · L8

•matchType = previous_version_dangerous_delta matchedPackage = @feiyang666/dsh-mobile-remote@1.6.1 matchedIdentity = npm:[redacted]:1.6.1 similarity = 0.400 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/external.jsView on unpkg

24} from 'node:fs' L25: import { spawn } from 'node:child_process' L26: import { createWsStatusClient } from './ws-client.js' ... L29: * 可用 DSH_REMOTE_SERVER 覆盖。 */ L30: const DEFAULT_SERVER_BASE = 'https://api.deepseekharness.desktop.cwj666.top' L31: ... L35: (body && typeof body.serverBase === 'string' && body.serverBase.trim()) L36: || process.env.DSH_REMOTE_SERVER L37: || DEFAULT_SERVER_BASE

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/external.jsView on unpkg · L24

8Trigger-reachable credential exfiltration chain: manifest.main -> lib/index.js -> lib/external.js L8: // L9: // 运行时依赖：Node 内置模块 + `ws`（WebSocket 长连接接收中转服务状态推送， L10: // 替代高频轮询；ws 依赖缺失时自动回退 HTTP 低频查询）。frpc 二进制由中转服务提供或用户本地放置。 ... L24: } from 'node:fs' L25: import { spawn } from 'node:child_process' L26: import { createWsStatusClient } from './ws-client.js' ... L35: (body && typeof body.serverBase === 'string' && body.serverBase.trim()) L36: || process.env.DSH_REMOTE_SERVER L37: || DEFAULT_SERVER_BASE ... L42: function externalDir() { L43: const home = process.env.DSH_HOME || join(homedir(), '.dsh') L44: return join(home, 'plugins', 'dsh-mobile-remote', 'external')

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

lib/external.jsView on unpkg · L8

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

Source & flagged code

7 flagged

lib/index.jsView file

Lines 14-54javascript

14//

15// 为什么命令行启动也能远程控制（不需要桌面端）：

16// 官方 CLI 出于安全拒绝 `--host 0.0.0.0`（见 dsh-web-app/startup.ts），但

17// 官方 `--patch <overlay>` / profile 的 cordis.patch.yml 配置层完整支持

18// `webserver.host: 0.0.0.0`，且 profile patch 由 app-boot 的 watchUserPatches

19// 通过 Cordis HMR 热重载。因此本插件在设置页切换开关 = 写入 / 移除 profile

20// patch 的 webserver 行，即可让 dsh 重新监听所有网卡——与桌面端 `--patch`

21// overlay 机制一致，官方 CLI 用户无需安装桌面端。

22//

23// 零运行时依赖（除 lib/qrcode.js 内联的 MIT QR 生成器）：

24// 不 import 任何 dsh-client / dsh-host 内部包，仅使用 Node 内置模块与

25// webServer 服务公开的 tapIndex / register 接口。

26

27import {

28 networkInterfaces, homedir, hostname, cpus, totalmem, freemem,

29 platform, release, arch, loadavg, uptime as osUptime,

30} from 'node:os'

31import { join, dirname } from 'node:path'

32import {

33 existsSync, readFileSync, writeFileSync, unlinkSync, mkdirSync, rmSync,

34} from 'node:fs'

35import { spawn } from 'node:child_process'

36import qrcode from './qrcode.js'

High

Child Process

Package source references child process execution.

lib/index.jsView on unpkg · L34

37import {

38 startExternal, stopExternal, externalView,

39 autoRestoreExternal, loadPersistedState, DEFAULT_SERVER_BASE,

40 frpcLogTail,

41} from './external.js'

42import {

43 hasPassword, verifyPassword, setPassword,

44 isEnabled, login, verifyToken, revokeToken, clearSessions,

45} from './password.js'

46import { wsAvailable } from './ws-client.js'

47

48/** 插件名（loader 诊断用）。 */

49export const name = 'dsh-mobile-remote'

50

51/** 依赖 dsh-host-webserver 注入的 webServer 服务，保证 tapIndex / register 可用。 */

52export const inject = ['webServer']

53

54/** 移动端断点：与 DSH 原生 SIDEBAR_AUTO_COLLAPSE = 1024 对齐。 */

lib/external.jsView file

Lines 1-44javascript

1// dsh-mobile-remote — 外网隧道管理模块（host 侧）。

2//

3// 负责把"外网访问"做成一个开关：

4// - 从中转服务（dsh-update-server）通过绑定码换取 frpc 配置 + 外网链接

5// - 下载/定位 frpc 可执行文件，写入 frpc.toml 并启动子进程

6// - 写 profile 的 connection trustedHosts，放行外网域名（通过 /api 信任围栏）

7// - 心跳上报、状态查询、停止

8//

9// 运行时依赖：Node 内置模块 + `ws`（WebSocket 长连接接收中转服务状态推送，

10// 替代高频轮询；ws 依赖缺失时自动回退 HTTP 低频查询）。frpc 二进制由中转服务提供或用户本地放置。

11

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg