registry / @goodandready/dsh-cron / 0.3.32
@goodandready/dsh-cron@0.3.32
Background automation runner for DSH: isolated agent runs, script/HTTP/SSH/Docker runtimes, cost guard, notifications, heartbeats.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe flagged TUI settings code declares user-configurable delivery fields, and credential resolution is for those integrations. The inspected client fetch is same-origin, and Telegram delivery targets Telegram's Bot API; no evidence showed credentials or application records being sent to an unrelated receiver.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The host application loads the plugin; network delivery occurs when configured tasks or notifications are used.
Impact
No unauthorized credential collection, unrelated data transfer, or other malicious impact was found.
Mechanism
The package resolves configured credentials and sends task-related notifications to their configured services. The web client uses same-origin requests.
AI rationale
The flagged TUI settings code declares user-configurable delivery fields, and credential resolution is for those integrations. The inspected client fetch is same-origin, and Telegram delivery targets Telegram's Bot API; no evidence showed credentials or application records being sent to an unrelated receiver.
Evidence
lib/secrets.jslib/telegram.jslib/client.jslib/tui-settings.js
Network endpoints1
api.telegram.org
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies this as a DSH background automation and scheduling package.
- TUI settings define delivery configuration fields, including Telegram credentials and notification destinations.
- Credential resolution uses the DSH credentials service or a specifically named environment variable.
- The client fetch helper uses same-origin requests for its web interface.
- Telegram delivery sends messages through Telegram's Bot API.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
11 flaggedlib/tui-settings.jsView file
68label: 'Feishu Webhook URL',
L69: placeholder: 'https://open.feishu.cn/open-apis/bot/v2/hook/...',
L70: format: textFormat,
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
lib/tui-settings.jsView on unpkg · L68lib/client.jsView file
128'form.sshTargetLabel': 'Fallback target (user@host, optional)',
L129: 'form.sshKeyLabel': 'Private key path (fallback, optional)',
L130: 'form.dockerImageLabel': 'Container image', 'form.sk[redacted]': 'Skill name',
...
L155: 'form.promptLabelLlm': 'Instruction / Prompt for the agent',
L156: 'form.promptPlaceholderScript': 'curl -fsSL https://... || exit 1',
L157: 'form.promptPlaceholderLlm': 'Describe exactly what the agent should do...',
...
L255: 'form.preflightLabel': 'Pre-flight check', 'form.preflightNone': 'None',
L256: 'form.preflightHttp': 'HTTP (2xx probe)', 'form.preflightShell': 'Shell command (exit code 0)',
L257: 'form.preflightDisk': 'Disk space (path:minPercent)',
...
L799: try {
L800: data = await res.json();
L801: } catch (jsonErr) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
Findings
3 Critical8 High3 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationlib/tui-settings.js
CriticalCredential Exfiltrationlib/client.js
CriticalTrigger Reachable Dangerous Capabilitylib/client.js
HighTrigger Reachable Credential Exfiltrationlib/client.js
HighSemantic Analysis Limitedcordis.patch.yml
HighKnown Malware Source Similaritylib/runtimes/runner-external.js
HighKnown Malware Source Similaritylib/updater.js
HighKnown Malware Source Similaritylib/llm-actions.js
HighKnown Malware Source Similaritylib/scheduler/scheduler-preflight.js
HighKnown Malware Source Similaritylib/secrets.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @goodandready/dsh-cron@0.3.32.
See all versions of @goodandready/dsh-cron for other recorded verdicts.
- Review the evidence and your use of @goodandready/dsh-cron@0.3.32 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.