registry / @noob-stupid/dsh-plugin-console / 0.3.31
@noob-stupid/dsh-plugin-console@0.3.31
DSH plugin management panel & marketplace: one-click enable/disable, multi-source market (GitHub/Gitee/custom), static-index market (500+ plugins / 300 skills), skills, suites, and one-click framework upgrade.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a high-impact DSH extension with persistent managed-service capability, but the source does not establish malicious install-time behavior, secret theft, or stealthy remote execution. It warrants a warning for agent-extension lifecycle and deployment risk.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
DSH profile activation, then a same-origin local console request or a previously saved auto-start component.
Impact
It can modify the DSH profile and install or start user-selected software, creating a meaningful extension control surface.
Mechanism
Profile patching, package installation, file writes, and managed process startup.
AI rationale
This is a high-impact DSH extension with persistent managed-service capability, but the source does not establish malicious install-time behavior, secret theft, or stealthy remote execution. It warrants a warning for agent-extension lifecycle and deployment risk.
Evidence
package.jsoncordis.patch.ymllib/index.jsprofile package.jsonprofile node_modules~/.dsh
Network endpoints2
registry.npmmirror.commirrors.aliyun.com
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The bundle patch automatically adds this console to a DSH profile.
- The local console can install packages through pnpm.
- It can run AI-planned package installs and write files within DSH-approved paths.
- Saved auto-start components are launched when DSH starts.
Evidence against
- The manifest has only a prepublish check and no install-time lifecycle hook.
- Sensitive operations are exposed through a loopback-only route with host and browser-origin checks.
- No covert credential exfiltration or hidden remote payload execution was found.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedlib/index.jsView file
569maxBuffer: 4 * 1024 * 1024,
L570: env: { ...process.env, COREPACK_NPM_REGISTRY: 'https://registry.npmmirror.com', GIT_TERMINAL_PROMPT: '0', GCM_INTERACTIVE: 'never' },
L571: }
...
L578: const cmd = `${JSON.stringify('corepack')} ${args.map((arg) => JSON.stringify(arg)).join(' ')}`
L579: await execFileAsync(process.env.ComSpec ?? 'cmd.exe', ['/d', '/s', '/c', cmd], opts)
L580: return
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
lib/index.jsView on unpkg · L5697* POST /plugin-console/search GitHub 仓库搜索（dsh-plugin 相关）
L8: * POST /plugin-console/repo 读取仓库的 package.json，判断是否可安装
L9: * POST /plugin-console/install 安装 npm 包（或 git 仓库）并追加启用条目
...
L16: import { readFileSync, writeFileSync, existsSync, statSync, rmSync, readdirSync, mkdirSync, copyFileSync } from 'node:fs'
L17: import { execFile, spawn } from 'node:child_process'
L18: import { promisify } from 'node:util'
...
L22: import { createRequire } from 'node:module'
L23: import { request as httpsRequest } from 'node:https'
L24:
...
L136: if (pkgPath === null) throw new Error('not found')
L137: const pkg = JSON.parse(await readFile(pkgPath, 'utf8'))
L138: return typeof pkg.dsh?.bundle?.patch === 'string'
Critical
Persistence Backdoor
Source writes persistence or remote-access backdoor material.
lib/index.jsView on unpkg · L7Findings
3 Critical4 High5 Medium5 Low
CriticalSame File Env Network Executionlib/index.js
CriticalPersistence Backdoorlib/index.js
CriticalTrigger Reachable Dangerous Capabilitylib/index.js
HighChild Processlib/index.js
HighShelllib/index.js
HighTrigger Reachable Persistencelib/index.js
HighSemantic Analysis Limitedpackage.json
MediumDynamic Requirelib/client.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencelib/index.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
Low
Affected versions and remediation
This report applies to @noob-stupid/dsh-plugin-console@0.3.31.
See all versions of @noob-stupid/dsh-plugin-console for other recorded verdicts.
- Review the evidence and your use of @noob-stupid/dsh-plugin-console@0.3.31 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.