registry / @goodandready/dsh-cron / 0.3.37
@goodandready/dsh-cron@0.3.37
Background automation runner for DSH: isolated agent runs, script/HTTP/SSH/Docker runtimes, cost guard, notifications, heartbeats.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe package manifest has no install hook, and the examined Feishu and SSH references are part of user-configured features. The client uses same-origin routes for task data, with no evidence in the inspected paths of automatic credential collection or exfiltration.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The DSH host loads the plugin; tasks and notifications run when configured by the user.
Impact
No automatic credential exfiltration or other malicious behavior was found in the inspected paths.
Mechanism
The inspected settings expose user-provided delivery configuration, and the client requests task data from same-origin routes. The flagged Feishu host appears as a webhook placeholder.
AI rationale
The package manifest has no install hook, and the examined Feishu and SSH references are part of user-configured features. The client uses same-origin routes for task data, with no evidence in the inspected paths of automatic credential collection or exfiltration.
Network endpoints3
/dsh-cron/settings/dsh-cron/tasksopen.feishu.cn (user-configured webhook placeholder)
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as a DSH background automation runner and has no install lifecycle scripts.
- Feishu and other delivery settings are user-configurable fields in the TUI settings section.
- SSH task data stores a user-entered target and private key path; the client fetches task data through same-origin routes.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
11 flaggedlib/tui-settings.jsView file
68label: 'Feishu Webhook URL',
L69: placeholder: 'https://open.feishu.cn/open-apis/bot/v2/hook/...',
L70: format: textFormat,
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
lib/tui-settings.jsView on unpkg · L68lib/client.jsView file
135'form.sshTargetLabel': 'Fallback target (user@host, optional)',
L136: 'form.sshKeyLabel': 'Private key path (fallback, optional)',
L137: 'form.dockerImageLabel': 'Container image', 'form.sk[redacted]': 'Skill name',
...
L162: 'form.promptLabelLlm': 'Instruction / Prompt for the agent',
L163: 'form.promptPlaceholderScript': 'curl -fsSL https://... || exit 1',
L164: 'form.promptPlaceholderLlm': 'Describe exactly what the agent should do...',
...
L262: 'form.preflightLabel': 'Pre-flight check', 'form.preflightNone': 'None',
L263: 'form.preflightHttp': 'HTTP (2xx probe)', 'form.preflightShell': 'Shell command (exit code 0)',
L264: 'form.preflightDisk': 'Disk space (path:minPercent)',
...
L842: try {
L843: data = await res.json();
L844: } catch (jsonErr) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
Findings
4 Critical7 High3 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationlib/tui-settings.js
CriticalCredential Exfiltrationlib/client.js
CriticalTrigger Reachable Dangerous Capabilitylib/client.js
CriticalPrevious Version Dangerous Deltalib/scheduler/scheduler-preflight.js
HighTrigger Reachable Credential Exfiltrationlib/client.js
HighSemantic Analysis Limitedcordis.patch.yml
HighKnown Malware Source Similaritylib/runtimes/runner-external.js
HighKnown Malware Source Similaritylib/updater.js
HighKnown Malware Source Similaritylib/llm-actions.js
HighKnown Malware Source Similaritylib/secrets.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @goodandready/dsh-cron@0.3.37.
See all versions of @goodandready/dsh-cron for other recorded verdicts.
- Review the evidence and your use of @goodandready/dsh-cron@0.3.37 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.