registry / @noob-stupid/dsh-plugin-console / 0.3.13

@noob-stupid/dsh-plugin-console@0.3.13

DSH plugin management panel & marketplace: one-click enable/disable, multi-source market (GitHub/Gitee/custom), static-index market (500+ plugins / 300 skills), skills, suites, and one-click framework upgrade.

AI Security Review

scanned 24d ago · by lpm-firewall-ai

The scanner flags execution and persistence primitives, but the inspected source places them in a plugin-management host with loopback-only route access. No concrete malicious behavior was established.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The DSH host loads the plugin and registers its route handler.

Impact

No confirmed attack surface was established from the inspected source.

Mechanism

The handler checks that requests originate from loopback; framework management operations are exposed through the console.

AI rationale

Evidence

lib/index.js

Decision evidence

public snapshot

AI called this Clean at 87.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package entrypoint is the plugin host module; its client is separately exported.
The host registers its route handler through the plugin lifecycle and rejects non-loopback requests.

Evidence against

The host can run child processes and perform framework upgrade operations, but the inspected upgrade code is part of the plugin console's framework-management feature.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 334 KB of source, external domains: 127.0.0.1, api.github.com, cdn.jsdelivr.net, codeload.github.com, data.jsdelivr.com, ghfast.top, ghproxy.net, gitee.com, github.com, mirror.ghproxy.com, raw.githubusercontent.com, registry.npmjs.org, registry.npmmirror.com

Source & flagged code

6 flagged

lib/index.jsView file

336maxBuffer: 4 * 1024 * 1024, L337: env: { ...process.env, COREPACK_NPM_REGISTRY: 'https://registry.npmmirror.com', GIT_TERMINAL_PROMPT: '0', GCM_INTERACTIVE: 'never' }, L338: } ... L345: const cmd = `${JSON.stringify('corepack')} ${args.map((arg) => JSON.stringify(arg)).join(' ')}` L346: await execFileAsync(process.env.ComSpec ?? 'cmd.exe', ['/d', '/s', '/c', cmd], opts) L347: return

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

lib/index.jsView on unpkg · L336

7* POST /plugin-console/search GitHub 仓库搜索（dsh-plugin 相关） L8: * POST /plugin-console/repo 读取仓库的 package.json，判断是否可安装 L9: * POST /plugin-console/install 安装 npm 包（或 git 仓库）并追加启用条目 ... L16: import { readFileSync, writeFileSync, existsSync, statSync, rmSync, readdirSync, mkdirSync, copyFileSync } from 'node:fs' L17: import { execFile } from 'node:child_process' L18: import { promisify } from 'node:util' ... L22: import { createRequire } from 'node:module' L23: import { request as httpsRequest } from 'node:https' L24: ... L116: const pkgPath = require.resolve(`${packageName}/package.json`) L117: const pkg = JSON.parse(await readFile(pkgPath, 'utf8')) L118: return typeof pkg.dsh?.bundle?.patch === 'string'

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

lib/index.jsView on unpkg · L7

Findings

3 Critical2 High4 Medium3 Low

CriticalSame File Env Network Executionlib/index.js

CriticalPersistence Backdoorlib/index.js

CriticalTrigger Reachable Dangerous Capabilitylib/index.js

HighChild Processlib/index.js

HighTrigger Reachable Persistencelib/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencelib/index.js

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @noob-stupid/dsh-plugin-console@0.3.13.

See all versions of @noob-stupid/dsh-plugin-console for other recorded verdicts.

Review the evidence and your use of @noob-stupid/dsh-plugin-console@0.3.13 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-11 17:46:05.563Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @noob-stupid/dsh-plugin-console / 0.3.13

@noob-stupid/dsh-plugin-console@0.3.13

AI Security Review

scanned 24d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The DSH host loads the plugin and registers its route handler.

Impact

No confirmed attack surface was established from the inspected source.

Mechanism

The handler checks that requests originate from loopback; framework management operations are exposed through the console.

AI rationale

Evidence

lib/index.js

Decision evidence

public snapshot

AI called this Clean at 87.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package entrypoint is the plugin host module; its client is separately exported.
The host registers its route handler through the plugin lifecycle and rejects non-loopback requests.

Evidence against

The host can run child processes and perform framework upgrade operations, but the inspected upgrade code is part of the plugin console's framework-management feature.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

6 flagged

lib/index.jsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

lib/index.jsView on unpkg · L336

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

lib/index.jsView on unpkg · L7

Findings

3 Critical2 High4 Medium3 Low

CriticalSame File Env Network Executionlib/index.js

CriticalPersistence Backdoorlib/index.js

CriticalTrigger Reachable Dangerous Capabilitylib/index.js

HighChild Processlib/index.js

HighTrigger Reachable Persistencelib/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencelib/index.js

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @noob-stupid/dsh-plugin-console@0.3.13.

See all versions of @noob-stupid/dsh-plugin-console for other recorded verdicts.

Review the evidence and your use of @noob-stupid/dsh-plugin-console@0.3.13 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-11 17:46:05.563Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.