registry / @noob-stupid/dsh-plugin-console / 0.3.29

@noob-stupid/dsh-plugin-console@0.3.29

DSH plugin management panel & marketplace: one-click enable/disable, multi-source market (GitHub/Gitee/custom), static-index market (500+ plugins / 300 skills), skills, suites, and one-click framework upgrade.

AI Security Review

scanned 24d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook; its prepublish hook runs a BOM check. The flagged process management is tied to the plugin’s upgrade flow, and the inspected route guards restrict access to local requests.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A user invokes a plugin management or framework upgrade action through the local web interface.

Impact

No confirmed malicious effect was established.

Mechanism

The route handler checks local host and write-request origin; the upgrade flow uses a scheduled task to finish the requested upgrade and restart.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes lib/index.js as the plugin entrypoint and defines only a prepublish BOM check.
The route handler restricts requests to localhost and applies same-origin checks to write requests.
Framework upgrade runs through a dedicated route and uses a one-time scheduled task to complete the upgrade and restart.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 518 KB of source, external domains: 127.0.0.1, api.deepseek.com, api.github.com, cdn.jsdelivr.net, codeload.github.com, data.jsdelivr.com, ghfast.top, ghproxy.net, gitee.com, github.com, hf-mirror.com, huggingface.co, mirror.ghproxy.com, mirrors.aliyun.com, raw.githubusercontent.com, registry.npmjs.org, registry.npmmirror.com

Source & flagged code

8 flagged

lib/index.jsView file

569maxBuffer: 4 * 1024 * 1024, L570: env: { ...process.env, COREPACK_NPM_REGISTRY: 'https://registry.npmmirror.com', GIT_TERMINAL_PROMPT: '0', GCM_INTERACTIVE: 'never' }, L571: } ... L578: const cmd = `${JSON.stringify('corepack')} ${args.map((arg) => JSON.stringify(arg)).join(' ')}` L579: await execFileAsync(process.env.ComSpec ?? 'cmd.exe', ['/d', '/s', '/c', cmd], opts) L580: return

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

lib/index.jsView on unpkg · L569

7* POST /plugin-console/search GitHub 仓库搜索（dsh-plugin 相关） L8: * POST /plugin-console/repo 读取仓库的 package.json，判断是否可安装 L9: * POST /plugin-console/install 安装 npm 包（或 git 仓库）并追加启用条目 ... L16: import { readFileSync, writeFileSync, existsSync, statSync, rmSync, readdirSync, mkdirSync, copyFileSync } from 'node:fs' L17: import { execFile, spawn } from 'node:child_process' L18: import { promisify } from 'node:util' ... L22: import { createRequire } from 'node:module' L23: import { request as httpsRequest } from 'node:https' L24: ... L136: if (pkgPath === null) throw new Error('not found') L137: const pkg = JSON.parse(await readFile(pkgPath, 'utf8')) L138: return typeof pkg.dsh?.bundle?.patch === 'string'

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

lib/index.jsView on unpkg · L7

Findings

3 Critical4 High4 Medium5 Low

CriticalSame File Env Network Executionlib/index.js

CriticalPersistence Backdoorlib/index.js

CriticalTrigger Reachable Dangerous Capabilitylib/index.js

HighChild Processlib/index.js

HighShelllib/index.js

HighTrigger Reachable Persistencelib/index.js

HighSemantic Analysis Limitedpackage.json

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencelib/index.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

Affected versions and remediation

This report applies to @noob-stupid/dsh-plugin-console@0.3.29.

See all versions of @noob-stupid/dsh-plugin-console for other recorded verdicts.

Review the evidence and your use of @noob-stupid/dsh-plugin-console@0.3.29 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-11 17:45:07.324Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @noob-stupid/dsh-plugin-console / 0.3.29

@noob-stupid/dsh-plugin-console@0.3.29

AI Security Review

scanned 24d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A user invokes a plugin management or framework upgrade action through the local web interface.

Impact

No confirmed malicious effect was established.

Mechanism

The route handler checks local host and write-request origin; the upgrade flow uses a scheduled task to finish the requested upgrade and restart.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes lib/index.js as the plugin entrypoint and defines only a prepublish BOM check.
The route handler restricts requests to localhost and applies same-origin checks to write requests.
Framework upgrade runs through a dedicated route and uses a one-time scheduled task to complete the upgrade and restart.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

8 flagged

lib/index.jsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

lib/index.jsView on unpkg · L569

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

lib/index.jsView on unpkg · L7

Findings

3 Critical4 High4 Medium5 Low

CriticalSame File Env Network Executionlib/index.js

CriticalPersistence Backdoorlib/index.js

CriticalTrigger Reachable Dangerous Capabilitylib/index.js

HighChild Processlib/index.js

HighShelllib/index.js

HighTrigger Reachable Persistencelib/index.js

HighSemantic Analysis Limitedpackage.json

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencelib/index.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

Affected versions and remediation

This report applies to @noob-stupid/dsh-plugin-console@0.3.29.

See all versions of @noob-stupid/dsh-plugin-console for other recorded verdicts.

Review the evidence and your use of @noob-stupid/dsh-plugin-console@0.3.29 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-11 17:45:07.324Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.