registry / @noob-stupid/dsh-plugin-console / 0.5.94
@noob-stupid/dsh-plugin-console@0.5.94
DSH 框架升级安全与插件升级门控：一键升级、失败自动回滚、升级后回滚上版、旧插件不适配自动禁用；内置多源插件市场为发现层，插件源全部可自定义，可指向公司内网私有源 / 私有索引 / 本地 Git 仓库，纯内网离线可用 | Framework upgrade safety & plugin version gating for DSH, with a customizable multi-source plugin market: point every source at internal mirror
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package's lifecycle script only checks the manifest, and its upgrade route requires a local POST request. The automatic state check performs a narrow framework compatibility patch that matches the package's stated purpose; the watchdog persistence helper is manually invoked.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The compatibility check runs when the local state endpoint is requested; framework upgrades require a POST to the upgrade route.
Impact
The compatibility patch modifies the installed dsh-app-boot entry point. The inspected behavior is consistent with the package's framework management purpose.
Mechanism
The package backs up profile data, patches a specific framework parser when its expected source is found, and downloads framework packages from configured-in-code registry endpoints during an upgrade.
AI rationale
The package's lifecycle script only checks the manifest, and its upgrade route requires a local POST request. The automatic state check performs a narrow framework compatibility patch that matches the package's stated purpose; the watchdog persistence helper is manually invoked.
Network endpoints2
registry.npmmirror.comregistry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to lib/index.js and defines only a prepublishOnly script that runs a package.json BOM check.
- Framework upgrades are dispatched through a POST route; the package also restricts its HTTP interface to loopback requests.
- The state endpoint applies a framework compatibility check that backs up profile data and attempts a targeted dsh-app-boot parser patch.
- The patch resolves its target as the installed dsh-app-boot entry and changes it only when the expected parser code is present.
- Watchdog task registration is documented as a manual PowerShell command; no install hook registers it.
- Framework installation uses npmmirror with npmjs.org as a fallback within the upgrade handler.
Evidence against
- A local GET of the state endpoint can write a compatibility patch into the installed dsh-app-boot file.
- The framework upgrade handler uses registry.npmmirror.com as its first package source.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
Source & flagged code
8 flaggedlib/server/domain/install-verify.jsView file
50try {
L51: const manifest = JSON.parse(readFileSync(join(profileDir, 'package.json'), 'utf8'))
L52: const bundles = manifest?.dsh?.profile?.bundles
Low
Weak Crypto
Package source references weak cryptographic algorithms.
lib/server/domain/install-verify.jsView on unpkg · L50lib/server/domain/framework.jsView file
4Trigger-reachable persistence chain: manifest.main -> lib/index.js -> lib/server/domain/framework.js
L4: import { readFileSync, writeFileSync, existsSync, readdirSync, mkdirSync, copyFileSync } from 'node:fs'
L5: import { execFile } from 'node:child_process'
L6: import { dirname, join, basename, resolve } from 'node:path'
...
L18: try {
L19: const requireLocal = createRequire(join(pluginRoot(), 'package.json'))
L20: return join(dirname(requireLocal.resolve('@deepseek-ai/dsh/package.json')), 'lib', 'bin.js')
...
L38: * npm 的 cache 位置本来就是用户配置（把 cache 指到别的盘是常见做法），所以按 npm 自己的
L39: * 配置来源读取：环境变量 npm[redacted] / NPM_CONFIG_CACHE，以及用户级 ~/.npmrc 的 `cache=`。
L40: * （原实现把开发机上某个盘符下的 `node_cache\_npx` 直接写进源码，随 npm 发给所有用户。） */
...
L44: if (typeof value !== 'string') return
L45: const dir = value.tri
High
Findings
3 Critical2 High5 Medium6 Low
CriticalPersistence Backdoorlib/server/routes/framework.js
CriticalTrigger Reachable Dangerous Capabilitylib/server/routes/framework-upgrade.js
CriticalPrevious Version Dangerous Deltalib/server/routes/framework.js
HighTrigger Reachable Persistencelib/server/domain/framework.js
HighSemantic Analysis Limitedlib/server/domain/install-diagnose.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencelib/server/domain/framework.js
MediumShips Build Helperscripts/fw-watchdog.cmd
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @noob-stupid/dsh-plugin-console@0.5.94.
See all versions of @noob-stupid/dsh-plugin-console for other recorded verdicts.
- Review the evidence and your use of @noob-stupid/dsh-plugin-console@0.5.94 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.