registry / @noob-stupid/dsh-plugin-console / 0.3.50
@noob-stupid/dsh-plugin-console@0.3.50
DSH plugin management panel & marketplace: one-click enable/disable, multi-source market (GitHub/Gitee/custom), static-index market (500+ plugins / 300 skills), skills, suites, and one-click framework upgrade.
AI Security Review
scanned 24d ago · by lpm-firewall-aiSource inspection shows the persistence finding is tied to an explicit service restart route, with a guard that self-removes after recovery. The package's prepublishOnly script only checks package.json for a byte-order mark.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A caller invokes the plugin console restart route.
Impact
It can restart the user's service after an explicit restart request; the inspected behavior does not establish stealth persistence or a malicious attack.
Mechanism
The route creates scheduled tasks to restart the service and remove the guard when service recovery succeeds.
AI rationale
Source inspection shows the persistence finding is tied to an explicit service restart route, with a guard that self-removes after recovery. The package's prepublishOnly script only checks package.json for a byte-order mark.
Evidence
temporary restart scripts and guard state under the system temporary directoryscheduled task entries
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package entrypoint implements a plugin console with a restart route that schedules temporary service-recovery tasks when invoked.
- The restart guard removes its scheduled task after the service is listening; the observed persistence is bounded to recovery behavior.
- The only manifest lifecycle script is prepublishOnly, which runs a package BOM check.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedlib/index.jsView file
7* POST /plugin-console/search GitHub 仓库搜索（dsh-plugin 相关）
L8: * POST /plugin-console/repo 读取仓库的 package.json，判断是否可安装
L9: * POST /plugin-console/install 安装 npm 包（或 git 仓库）并追加启用条目
...
L16: import { readFileSync, writeFileSync, existsSync, statSync, rmSync, readdirSync, mkdirSync, copyFileSync, realpathSync } from 'node:fs'
L17: import { execFile, spawn } from 'node:child_process'
L18: import { promisify } from 'node:util'
...
L22: import { createRequire } from 'node:module'
L23: import { request as httpsRequest } from 'node:https'
L24:
...
L136: if (pkgPath === null) throw new Error('not found')
L137: const pkg = JSON.parse(await readFile(pkgPath, 'utf8'))
L138: return typeof pkg.dsh?.bundle?.patch === 'string'
Critical
Persistence Backdoor
Source writes persistence or remote-access backdoor material.
lib/index.jsView on unpkg · L77Trigger-reachable chain: manifest.main -> lib/index.js
L7: * POST /plugin-console/search GitHub 仓库搜索（dsh-plugin 相关）
L8: * POST /plugin-console/repo 读取仓库的 package.json，判断是否可安装
L9: * POST /plugin-console/install 安装 npm 包（或 git 仓库）并追加启用条目
...
L16: import { readFileSync, writeFileSync, existsSync, statSync, rmSync, readdirSync, mkdirSync, copyFileSync, realpathSync } from 'node:fs'
L17: import { execFile, spawn } from 'node:child_process'
L18: import { promisify } from 'node:util'
...
L22: import { createRequire } from 'node:module'
L23: import { request as httpsRequest } from 'node:https'
L24:
...
L136: if (pkgPath === null) throw new Error('not found')
L137: const pkg = JSON.parse(await readFile(pkgPath, 'utf8'))
L138: return typeof pkg.dsh?.bundle?.patch === 'string'
Findings
2 Critical1 High4 Medium5 Low
CriticalPersistence Backdoorlib/index.js
CriticalTrigger Reachable Dangerous Capabilitylib/index.js
HighTrigger Reachable Persistencelib/index.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencelib/index.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @noob-stupid/dsh-plugin-console@0.3.50.
See all versions of @noob-stupid/dsh-plugin-console for other recorded verdicts.
- Review the evidence and your use of @noob-stupid/dsh-plugin-console@0.3.50 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.