Loading npm security reports…

@marecgents/dsh-hub@0.0.1-rc.12: AI-agent control-surface risk | LPM Firewall

registry / @marecgents/dsh-hub / 0.0.1-rc.12

@marecgents/dsh-hub@0.0.1-rc.12

DeepSeek Harness desktop hub — native desktop shell (WebView2) for dsh's Web UI with tray, theme sync, window-state memory and a right sidebar. Injects the shell + plugin page only when launched by this project (desktop shortcut or `dsh-hub` command).

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. On npm installation, the package can silently add global software, including the separate DeepSeek dsh AI-agent CLI. On Windows it also creates a desktop launcher.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm postinstall on Windows when dsh or pnpm is absent

Impact

Mutates global package-manager state and installs a foreign AI-agent command without an explicit user action.

Mechanism

automatic global package installation and launcher creation

Policy narrative

Installing this package invokes postinstall. If dsh is missing, it executes `npm install -g @deepseek-ai/dsh`; if pnpm is missing, it similarly installs pnpm globally. These actions occur before the Windows-only shortcut flow and are not gated by an interactive approval, extending the install into a separate AI-agent CLI and global tooling surface.

Rationale

The lifecycle hook performs unconsented global installation of a foreign AI-agent CLI, which is a concrete install-time control-surface mutation. Benign desktop-shell functionality does not require that mutation to be accepted at dependency-install time.

Evidence

package.jsonscripts/postinstall.mjsbin/launcher.mjsbin/launcher.vbs

Decision evidence

public snapshot

AI identified this as a at 96.0% confidence with false-positive risk.

Source & flagged code

6 flagged

package.jsonView file

Lines 22-62json

22 "./src/*": "./src/*",

23 "./package.json": "./package.json"

24 },

25 "files": [

26 "lib",

27 "src",

28 "bin",

29 "scripts",

30 "assets",

31 "cordis.patch.yml",

32 "README.md"

33 ],

34 "bin": {

35 "dsh-hub": "bin/dsh-hub.mjs"

36 },

37 "scripts": {

38 "build": "tsc",

39 "build:client": "node ./scripts/build-client.mjs",

40 "generate:icons": "node ./scripts/generate-icon.mjs",

41 "prepack": "npm run build && npm run build:client",

42 "postinstall": "node ./scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L42

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L42

43 "postuninstall": "node ./scripts/postuninstall.mjs"

44 },

45 "dsh": {

46 "bundle": {

47 "patch": "./cordis.patch.yml"

48 },

49 "client": {

50 "platform": "web",

51 "inject": [

52 "@deepseek-ai/dsh-client-runtime",

53 "@deepseek-ai/dsh-client-locale",

54 "@deepseek-ai/dsh-client-ui-settings"

55 ]

56 }

57 },

58 "engines": {

59 "node": ">=24.0.0"

60 },

61 "dependencies": {

62 "@deepseek-ai/schemastery": "^3.18.1",

bin/dsh-hub.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

2/**

3 * dsh-hub — the dsh-hub launcher command. Boots `dsh web` with the

4 * desktop-shell marker set, so the plugin opens the native window and injects

5 * the plugin config page. Anything after `dsh-hub` is forwarded to `dsh web`.

6 *

7 * Usage:

8 * dsh-hub # boot dsh web with the desktop shell

9 * dsh-hub --port 4000 # forward extra args to dsh web

10 */

11

bin/multi-instance.mjsView file

Lines 53-93javascript

53 try {

54 const result = spawnSync('netstat', ['-ano', '-p', 'tcp'], { encoding: 'utf8', windowsHide: true })

55

bin/launcher.mjsView file

Lines 256-296javascript

256 process.exit(0)

257 }

258

259 // Clear any stale quit marker from a previous run; this launcher is now the

260 // single owner and must not mistake an old marker for a new intentional quit.

261 clearQuitMarker()

262

263 // Concurrent-instance guard (shared with the `dsh-hub` terminal command):

bin/hub-exe.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @marecgents/dsh-hub@0.0.1-rc.9 matchedIdentity = npm:QG1hcmVjZ2VudHMvZHNoLWh1Yg:0.0.1-rc.9 similarity = 0.488 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/hub-exe.mjsView on unpkg