registry / @noob-stupid/dsh-plugin-console / 0.5.17
@noob-stupid/dsh-plugin-console@0.5.17
DSH 框架升级安全与插件升级门控：一键升级、失败自动回滚、升级后回滚上版、旧插件不适配自动禁用；内置多源插件市场为发现层，插件源全部可自定义，可指向公司内网私有源 / 私有索引 / 本地 Git 仓库，纯内网离线可用 | Framework upgrade safety & plugin version gating for DSH, with a customizable multi-source plugin market: point every source at internal mirror
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe helper’s write to a separately installed framework file is a real unresolved capability, while the manifest shows no install-time hook and the inspected excerpts establish no concrete attack chain. I classify this as suspicious pending resolution of the patch trigger and the incomplete market-route analysis.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The code is associated with framework management; the inspected excerpt does not establish the exact call trigger for the patch helper.
Impact
A separately installed framework file may be modified; malicious impact is not confirmed from the inspected source.
Mechanism
It reads the target source, replaces matching parser code, makes a backup, and writes the modified content to the target path.
AI rationale
The helper’s write to a separately installed framework file is a real unresolved capability, while the manifest shows no install-time hook and the inspected excerpts establish no concrete attack chain. I classify this as suspicious pending resolution of the patch trigger and the incomplete market-route analysis.
Evidence
lib/server/domain/framework.js
Decision evidence
public snapshotAI called this Suspicious at 68.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest’s only publish hook runs a package manifest check.
- The framework domain code can overwrite a separately installed framework boot file after making a backup.
- The framework upgrade behavior is exposed through a route handler.
- Market searches can use a configured custom source.
- The scanner reported incomplete semantic analysis for the market route, so its behavior was not fully resolved.
Evidence against
- The inspected manifest shows no preinstall, install, or postinstall hook.
- The custom search source is selected from configured sources when a search route runs.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedlib/server/domain/install-verify.jsView file
50try {
L51: const manifest = JSON.parse(readFileSync(join(profileDir, 'package.json'), 'utf8'))
L52: const bundles = manifest?.dsh?.profile?.bundles
Low
Weak Crypto
Package source references weak cryptographic algorithms.
lib/server/domain/install-verify.jsView on unpkg · L50lib/server/domain/framework.jsView file
4Trigger-reachable persistence chain: manifest.main -> lib/index.js -> lib/server/domain/framework.js
L4: import { readFileSync, writeFileSync, existsSync, readdirSync, mkdirSync, copyFileSync } from 'node:fs'
L5: import { execFile } from 'node:child_process'
L6: import { dirname, join, basename, resolve } from 'node:path'
...
L18: try {
L19: const requireLocal = createRequire(join(pluginRoot(), 'package.json'))
L20: return join(dirname(requireLocal.resolve('@deepseek-ai/dsh/package.json')), 'lib', 'bin.js')
...
L38: const cacheRoots = [
L39: process.env.NODE_CACHE || '',
L40: 'D:\\node_cache\\_npx',
L41: join(homedir(), '.npm', '_npx'),
L42: join(process.env.LOCALAPPDATA || '', 'node_cache', '_npx'),
...
L81: try {
High
Trigger Reachable Persistence
Findings
2 Critical2 High4 Medium6 Low
CriticalPersistence Backdoorlib/server/routes/framework.js
CriticalTrigger Reachable Dangerous Capabilitylib/server/routes/framework-upgrade.js
HighTrigger Reachable Persistencelib/server/domain/framework.js
HighSemantic Analysis Limitedlib/server/routes/market.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencelib/server/domain/framework.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptolib/server/domain/install-verify.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @noob-stupid/dsh-plugin-console@0.5.17.
See all versions of @noob-stupid/dsh-plugin-console for other recorded verdicts.
- Review the evidence and your use of @noob-stupid/dsh-plugin-console@0.5.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.