registry / @marecgents/dsh-hub / 0.0.2-rc.7
@marecgents/dsh-hub@0.0.2-rc.7
DeepSeek Harness desktop hub — Tauri 2.x shell + dsh web plugin layer. This npm package ships the plugin half (client UI + HTTP routes + cordis.patch.yml); the desktop shell ships as the NSIS installer (see build/).
AI Security Review
scanned 18d ago · by lpm-firewall-aiSource supports a warning for guarded package-owned agent extension setup and automatic prerequisite installation. The inspected lifecycle does not show the unconsented broad agent-control mutation or other concrete attack needed to block publication.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
npm installation runs prerequisite setup; launching the sidecar runs profile assembly.
Impact
Global tooling and the agent's extension profile can change, but inspected source does not establish covert control hijacking or data theft.
Mechanism
The installer invokes npm globally, while profile assembly adds the package to the web profile and creates its package junction. Extension activation requires a launch environment marker.
AI rationale
Source supports a warning for guarded package-owned agent extension setup and automatic prerequisite installation. The inspected lifecycle does not show the unconsented broad agent-control mutation or other concrete attack needed to block publication.
Evidence
package.jsonscripts/postinstall.mjsscripts/assemble-profile.mjsbin/dsh-web-sidecar.mjscordis.patch.ymlprofiles/web/package.jsonnode_modules/@marecgents/dsh-hub
Network endpoints4
registry.npmjs.org/registry.npmmirror.commirrors.huaweicloud.com/repository/npm/mirrors.cloud.tencent.com/npm/
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json automatically runs the prerequisite installer after installation.
- scripts/postinstall.mjs can globally install the agent CLI from a selected npm registry.
- scripts/assemble-profile.mjs writes the agent web profile to register this package's extension.
- bin/dsh-web-sidecar.mjs invokes profile assembly when the sidecar is launched.
- cordis.patch.yml gates extension activation on DSH_HUB_LAUNCHED.
Evidence against
- The install hook does not invoke profile assembly or broadly rewrite agent controls.
- Legacy cleanup targets this package's old command shims and a shortcut with a matching legacy target.
- No runtime self-dependency, credential exfiltration, or concealed payload execution was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
11 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/dsh-web-sidecar.mjsView file
27L28: import { spawnSync } from 'node:child_process'
L29: import { existsSync } from 'node:fs'
High
Child Process
Package source references child process execution.
bin/dsh-web-sidecar.mjsView on unpkg · L27Findings
1 Critical8 High5 Medium5 Low
CriticalPrevious Version Dangerous Deltascripts/build-installer.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/dsh-web-sidecar.mjs
HighShellscripts/build-client.mjs
HighRuntime Package Installscripts/build-client.mjs
HighSemantic Analysis Limitedcordis.patch.yml
HighKnown Malware Source Similarityscripts/postinstall.mjs
HighKnown Malware Source Similarityscripts/verify-m4-multi-instance.mjs
HighKnown Malware Source Similarityscripts/verify-release.mjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
Medium
Affected versions and remediation
This report applies to @marecgents/dsh-hub@0.0.2-rc.7.
See all versions of @marecgents/dsh-hub for other recorded verdicts.
- Review the evidence and your use of @marecgents/dsh-hub@0.0.2-rc.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.