registry / @noob-stupid/dsh-plugin-console / 0.3.58
@noob-stupid/dsh-plugin-console@0.3.58
此版本有缺陷：私有聚合根安装会因 TDZ ReferenceError 失败。请升级到 0.3.61。
DSH plugin management panel & marketplace: one-click enable/disable, multi-source market (GitHub/Gitee/custom), static-index market (500+ plugins / 300 skills), skills, suites, and one-click framework upgrade.
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe package has no install-time lifecycle hook; its publish hook only runs a manifest check. The flagged scheduled-task behavior is invoked through a restart route and the recovery task removes itself after service recovery, so the inspected source does not establish malicious persistence.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A request reaches the service restart route.
Impact
The behavior supports recovery after a requested restart; no malicious persistence or data exfiltration was established.
Mechanism
On Windows, the route creates temporary scripts and scheduled tasks to restart the service, then removes the tasks when the service is listening.
AI rationale
The package has no install-time lifecycle hook; its publish hook only runs a manifest check. The flagged scheduled-task behavior is invoked through a restart route and the recovery task removes itself after service recovery, so the inspected source does not establish malicious persistence.
Evidence
lib/index.js
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to `lib/index.js` and defines only a publish-time check that checks the package manifest for a byte-order mark.
- The restart behavior is behind a specific restart route and registers a bounded recovery task to bring the service back after a restart.
- The recovery task deletes itself once the service is listening.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedlib/index.jsView file
7* POST /plugin-console/search GitHub 仓库搜索（dsh-plugin 相关）
L8: * POST /plugin-console/repo 读取仓库的 package.json，判断是否可安装
L9: * POST /plugin-console/install 安装 npm 包（或 git 仓库）并追加启用条目
...
L16: import { readFileSync, writeFileSync, existsSync, statSync, rmSync, readdirSync, mkdirSync, copyFileSync, realpathSync, chmodSync } from 'node:fs'
L17: import { execFile, spawn } from 'node:child_process'
L18: import { promisify } from 'node:util'
...
L22: import { createRequire } from 'node:module'
L23: import { request as httpsRequest } from 'node:https'
L24:
...
L136: if (pkgPath === null) throw new Error('not found')
L137: const pkg = JSON.parse(await readFile(pkgPath, 'utf8'))
L138: return typeof pkg.dsh?.bundle?.patch === 'string'
Critical
Persistence Backdoor
Source writes persistence or remote-access backdoor material.
lib/index.jsView on unpkg · L77Trigger-reachable chain: manifest.main -> lib/index.js
L7: * POST /plugin-console/search GitHub 仓库搜索（dsh-plugin 相关）
L8: * POST /plugin-console/repo 读取仓库的 package.json，判断是否可安装
L9: * POST /plugin-console/install 安装 npm 包（或 git 仓库）并追加启用条目
...
L16: import { readFileSync, writeFileSync, existsSync, statSync, rmSync, readdirSync, mkdirSync, copyFileSync, realpathSync, chmodSync } from 'node:fs'
L17: import { execFile, spawn } from 'node:child_process'
L18: import { promisify } from 'node:util'
...
L22: import { createRequire } from 'node:module'
L23: import { request as httpsRequest } from 'node:https'
L24:
...
L136: if (pkgPath === null) throw new Error('not found')
L137: const pkg = JSON.parse(await readFile(pkgPath, 'utf8'))
L138: return typeof pkg.dsh?.bundle?.patch === 'string
Findings
2 Critical1 High4 Medium5 Low
CriticalPersistence Backdoorlib/index.js
CriticalTrigger Reachable Dangerous Capabilitylib/index.js
HighTrigger Reachable Persistencelib/index.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencelib/index.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @noob-stupid/dsh-plugin-console@0.3.58.
See all versions of @noob-stupid/dsh-plugin-console for other recorded verdicts.
- Review the evidence and your use of @noob-stupid/dsh-plugin-console@0.3.58 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.