@noob-stupid/dsh-plugin-console@0.5.95
DSH 框架升级安全与插件升级门控：一键升级、失败自动回滚、升级后回滚上版、旧插件不适配自动禁用；内置多源插件市场为发现层，插件源全部可自定义，可指向公司内网私有源 / 私有索引 / 本地 Git 仓库，纯内网离线可用 | Framework upgrade safety & plugin version gating for DSH, with a customizable multi-source plugin market: point every source at internal mirror
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package automatically forwards a locally stored GitHub token to hard-coded third-party mirror hosts during repository lookups. The token is intended for GitHub, and the user did not configure these mirrors as a proxy.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A repository-details request uses the locally stored GitHub token.
Impact
Those mirror hosts can receive and potentially retain the user's GitHub token.
Mechanism
The package races a GitHub API request against requests to ghproxy.net and ghfast.top, passing the same authorization options to each mirror request.
Attack narrative
When the repository-details route looks up a GitHub repository, it reads the stored GitHub token and passes it to the GitHub request helper. That helper starts requests to hard-coded third-party mirrors with the same options, including the Bearer token. The mirrors can therefore receive the credential even if the official GitHub request succeeds first.
AI rationale
The package automatically forwards a locally stored GitHub token to hard-coded third-party mirror hosts during repository lookups. The token is intended for GitHub, and the user did not configure these mirrors as a proxy.
Evidence
lib/server/domain/install.jslib/server/infra/http.jslib/server/routes/market.jsgithub-auth.json
Network endpoints3
api.github.comghproxy.netghfast.top
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package reads a GitHub token from its local github-auth.json file.
- GitHub API requests attach that token as a Bearer authorization header.
- The HTTP helper starts requests to mirror prefixes while forwarding the original request options, including the token.
- The hard-coded API mirror hosts are ghproxy.net and ghfast.top.
- The repository-details route passes the stored token into a GitHub API request.
Evidence against
- The package describes itself as a framework and plugin manager, and its GitHub requests support repository details.
- The token flow is used when the repository-details route is requested; the reviewed source does not show it being sent to the mirror hosts during installation.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedlib/server/domain/install-verify.jsView file
50try {
L51: const manifest = JSON.parse(readFileSync(join(profileDir, 'package.json'), 'utf8'))
L52: const bundles = manifest?.dsh?.profile?.bundles
Low
Weak Crypto
Package source references weak cryptographic algorithms.
lib/server/domain/install-verify.jsView on unpkg · L50lib/server/domain/framework.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @noob-stupid/dsh-plugin-console@0.5.92
matchedIdentity = npm:[redacted]:0.5.92
similarity = 0.925
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
lib/server/domain/framework.jsView on unpkgFindings
3 Critical2 High5 Medium6 Low
CriticalPersistence Backdoorlib/server/routes/framework.js
CriticalTrigger Reachable Dangerous Capabilitylib/server/routes/framework-upgrade.js
CriticalPrevious Version Dangerous Deltalib/server/domain/framework.js
HighTrigger Reachable Persistencelib/server/domain/framework.js
HighSemantic Analysis Limitedlib/server/domain/install-diagnose.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencelib/server/domain/framework.js
MediumShips Build Helperscripts/fw-watchdog.cmd
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @noob-stupid/dsh-plugin-console@0.5.95.
See all versions of @noob-stupid/dsh-plugin-console for other recorded verdicts.
- Avoid installing @noob-stupid/dsh-plugin-console@0.5.95. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.