registry / @senguoyun/dsh-arkme / 0.1.61

@senguoyun/dsh-arkme@0.1.61

Arkme account, records, chat and interwoven-moments integration for DeepSeek Harness

AI Security Review

scanned 16d ago · by lpm-firewall-ai

No install-time or import-time attack was identified. Process, profile, and network behavior belongs to the Arkme DeepSeek Harness plugin and stays tied to configured service origins or a user-driven plugin update.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

The module runs when the DeepSeek Harness host loads the plugin. Update install and profile edits run from explicit plugin update or extension actions.

Impact

No unconsented credential theft, remote code execution, or foreign agent control-surface write was established.

Mechanism

Service calls use configured HTTPS origins, extension client code is sandboxed, and updates install a checked local tarball through the DSH plugin command with the shell disabled.

AI rationale

Inspected entrypoints show a host plugin for Arkme accounts, chat, and extensions, with loopback and HTTPS checks around its privileged helpers. The prepare script, credential helper, and self-update path are package-aligned and are not an automatic install-time attack chain.

Decision evidence

public snapshot

AI called this Clean at 84.0% confidence as Benign with low false-positive risk.

Why the final policy warns

The AI recommended clean, but the final policy action is warn. This report does not record a matching static-policy override reason.

Evidence for AI clean decision

package.json names the DeepSeek Harness Arkme plugin, sets main to lib/index.js, and defines no preinstall, install, or postinstall hook.
The extension restart helper accepts only loopback HTTP health checks and starts the recorded DSH binary with the shell disabled.
Plugin updates must use a configured HTTPS origin, reject the npm registry, and install a local file artifact whose package name is @senguoyun/dsh-arkme.
Profile bundle policy only rewrites dsh.profile.bundles for validated package names already present as profile dependencies.
Persistent extension client code is evaluated in a Function sandbox that stubs fetch and require.
assets/desktop_call/bundle.js is a bundled desktop call client loaded with the plugin UI, not an install script.
Host startup requires HTTPS service origins and binds the web UI to 127.0.0.1 unless allowNonLoopback is set.

Evidence against

The prepare script points at scripts/prepare-build.mjs, which is not in the published file set, so it is not a shipped install payload.
Windows credential-helper use and plugin self-update run from the host plugin after explicit install or account flows, not from an npm lifecycle hook.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsTelemetryUrlStrings

Manifest

NoLicense

scanned 17 file(s), 2.66 MB of source, external domains: 127.0.0.1, api.jotmo.cc, api.my-imcloud.com, apiger.my-imcloud.com, apiidn.my-imcloud.com, apiind.my-imcloud.com, apijpn.my-imcloud.com, apikr.my-imcloud.com, apiksa.my-imcloud.com, apisgp.my-imcloud.com, apiusa.my-imcloud.com, app.arkme.ai, boce-cdn.my-imcloud.com, data.jotmo.cc, events.im.qcloud.com, github.com, jiwo.cc, jotmo-audio.senguo.me, jotmo-bot.senguo.me, jotmo-chat.senguo.me, jotmo-data.senguo.me, jotmo-im.senguo.me, jotmo-intelligent.senguo.me, jotmo-openapi.senguo.me, jotmo-record.senguo.me, jotmo-relation.senguo.me, jotmo-subject.senguo.me, jotmo-webrtc.senguo.me, jotmo-world.senguo.me, jotmo.senguo.me, openapi.jotmo.cc, www.w3.org

Oversized source lightweight scan

assets/desktop_call/bundle.js3.90 MB file, sampled 256 KB

NetworkWebSocketHighEntropyStringsUrlStringsapi.my-imcloud.comapiger.my-imcloud.comapiidn.my-imcloud.comapiind.my-imcloud.comapijpn.my-imcloud.comapikr.my-imcloud.comapiksa.my-imcloud.comapisgp.my-imcloud.comapiusa.my-imcloud.comboce-cdn.my-imcloud.comevents.im.qcloud.comgithub.comwww.w3.org

lib/client.js8.01 MB file, sampled 256 KB

NetworkHighEntropyStringsUrlStringsapp.arkme.aigithub.comjiwo.cc

lib/persistent-runtime-CXd9RuRR.js2.77 MB file, sampled 256 KB

FilesystemNetworkEnvironmentVarsEvalCryptoHighEntropyStrings

Source & flagged code

18 flagged

lib/extension-profile-restart-helper.jsView file

4import { readFile, rm, unlink } from "node:fs/promises"; L5: import { spawn, spawnSync } from "node:child_process"; L6: import { join, relative, resolve } from "node:path";

High

Child Process

Package source references child process execution.

lib/extension-profile-restart-helper.jsView on unpkg · L4

24dshBinPath: stringValue(source.dshBinPath), L25: execArgv: Array.isArray(source.execArgv) ? source.execArgv.filter((item) => stringValue(item) !== void 0) : [], L26: restartArgv: Array.isArray(source.restartArgv) ? source.restartArgv.filter((item) => stringValue(item) !== void 0) : [],

High

Shell

Package source references shell execution.

lib/extension-profile-restart-helper.jsView on unpkg · L24

•matchType = normalized_sha256 matchedPackage = @senguoyun/dsh-arkme@0.1.52 matchedPath = lib/extension-profile-restart-helper.js matchedIdentity = npm:QHNlbmd1b3l1bi9kc2gtYXJrbWU:0.1.52 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/extension-profile-restart-helper.jsView on unpkg

lib/persistent-runtime-CXd9RuRR.jsView file

4import { chmod as chmod$1, copyFile, link, lstat, mkdir, open, opendir, readFile, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises"; L5: import { createCipheriv, createDecipheriv, createHash, createHmac, createPublicKey, randomBytes, randomUUID, timingSafeEqual, verify } from "node:crypto"; L6: import minpath, { basename, dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path"; ... L8: import { gunzipSync, gzipSync } from "node:zlib"; L9: import { request } from "node:http"; L10: import { homedir } from "node:os"; ... L14: import minproc from "node:process"; L15: import { Resolver, lookup } from "node:dns/promises"; L16: import OSS from "ali-oss"; ... L108: }, L109: body: JSON.stringify({ L110: schemaVersion: 1,

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

lib/persistent-runtime-CXd9RuRR.jsView on unpkg · L4

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

lib/persistent-runtime-CXd9RuRR.jsView on unpkg · L4

lib/harness-onboarding-client.jsView file

6Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" }); L7: let react = require("react"); L8: //#region src/client/home-tour-diagnostics.ts

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/harness-onboarding-client.jsView on unpkg · L6

lib/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @senguoyun/dsh-arkme@0.1.53 matchedIdentity = npm:QHNlbmd1b3l1bi9kc2gtYXJrbWU:0.1.53 similarity = 0.522 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/index.jsView on unpkg

36523dshBinPath, L36524: execArgv: process.execArgv, L36525: stateDirectory, L36526: healthUrl: `http://127.0.0.1:${String(ctx.webServer.port)}${config.routePath}`, L36527: restartArgv: [...process.execArgv, ...process.argv.slice(1)], ... L36529: installStoreDirectory: extensionDirectory, L36530: ...process.env.ARKME_DESKTOP_MANAGED_RESTART === "1" && process.env.ARKME_DESKTOP_MANAGED_RESTART_PLAN_PATH !== void 0 ? { L36531: supervisedExitCode: 75,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/index.jsView on unpkg · L36523

2import { _ as parsePluginUpdateManifest, b as [redacted], d as writePluginUpdateLifecycleLog, f as PluginUpdateInstallStateStore, g as existingCachedPluginAr... L3: import { a as securePrivateDirectory, c as securePrivateFileSync, i as prepareProfilePackageManager, n as isArkmeProfilePackageName, o as securePrivateDirectorySync, r as localExte... L4: import { i as invokeArkmeBundle, n as arkmeBundleActive, r as deactivateArkmeBundle } from "./bundle-runtime-CE73h3vS.js"; ... L8: import { appendFile, chmod as chmod$1, mkdir, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises"; L9: import { createCipheriv, createDecipheriv, createHash, createHmac, getCiphers, randomBytes, randomUUID } from "node:crypto"; L10: import { execFile, spawn } from "n

assets/windows/arkme-credential-helper.exeView file

•path = assets/windows/arkme-credential-helper.exe kind = native_binary sizeBytes = 2024816 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

assets/windows/arkme-credential-helper.exeView on unpkg

lib/client.jsView file

•path = lib/client.js kind = oversized_source_file sizeBytes = 8394337 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

lib/client.jsView on unpkg

assets/desktop_call/bundle.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

assets/desktop_call/bundle.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @senguoyun/dsh-arkme@0.1.52 matchedPath = assets/desktop_call/bundle.js matchedIdentity = npm:QHNlbmd1b3l1bi9kc2gtYXJrbWU:0.1.52 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/desktop_call/bundle.jsView on unpkg

lib/profile-bundle-policy-DLXDyohJ.jsView file

•matchType = normalized_sha256 matchedPackage = @senguoyun/dsh-arkme@0.1.52 matchedPath = lib/profile-bundle-policy-DLXDyohJ.js matchedIdentity = npm:QHNlbmd1b3l1bi9kc2gtYXJrbWU:0.1.52 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/profile-bundle-policy-DLXDyohJ.jsView on unpkg

lib/plugin-updater-helper-y7wzJLOx.jsView file

•matchType = normalized_sha256 matchedPackage = @senguoyun/dsh-arkme@0.1.52 matchedPath = lib/plugin-updater-helper-y7wzJLOx.js matchedIdentity = npm:QHNlbmd1b3l1bi9kc2gtYXJrbWU:0.1.52 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/plugin-updater-helper-y7wzJLOx.jsView on unpkg

Source & flagged code

18 flagged · loading source

lib/extension-profile-restart-helper.jsView file

4import { readFile, rm, unlink } from "node:fs/promises"; L5: import { spawn, spawnSync } from "node:child_process"; L6: import { join, relative, resolve } from "node:path";

High

Child Process

Package source references child process execution.

lib/extension-profile-restart-helper.jsView on unpkg · L4

High

Shell

Package source references shell execution.

lib/extension-profile-restart-helper.jsView on unpkg · L24

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/extension-profile-restart-helper.jsView on unpkg

lib/persistent-runtime-CXd9RuRR.jsView file

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

lib/persistent-runtime-CXd9RuRR.jsView on unpkg · L4

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

lib/persistent-runtime-CXd9RuRR.jsView on unpkg · L4

92659]; L92660: const closure = new Function(...parameters, `return (async () => {\n${spec.code}\n})()`); L92661: const harness = new Proxy({}, { get(_target, property) {

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/persistent-runtime-CXd9RuRR.jsView on unpkg · L92659

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/persistent-runtime-CXd9RuRR.jsView on unpkg · L4

lib/harness-onboarding-client.jsView file

6Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" }); L7: let react = require("react"); L8: //#region src/client/home-tour-diagnostics.ts

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/harness-onboarding-client.jsView on unpkg · L6

lib/index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/index.jsView on unpkg

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/index.jsView on unpkg · L36523

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

lib/index.jsView on unpkg · L2

2Cross-file remote execution chain: lib/index.js spawns assets/desktop_call/bundle.js; helper contains network access plus dynamic code execution. L2: import { _ as parsePluginUpdateManifest, b as [redacted], d as writePluginUpdateLifecycleLog, f as PluginUpdateInstallStateStore, g as existingCachedPluginAr... L3: import { a as securePrivateDirectory, c as securePrivateFileSync, i as prepareProfilePackageManager, n as isArkmeProfilePackageName, o as securePrivateDirectorySync, r as localExte... L4: import { i as invokeArkmeBundle, n as arkmeBundleActive, r as deactivateArkmeBundle } from "./bundle-runtime-CE73h3vS.js"; ... L8: import { appendFile, chmod as chmod$1, mkdir, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises"; L9: import { createCip

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

lib/index.jsView on unpkg · L2

assets/windows/arkme-credential-helper.exeView file

•path = assets/windows/arkme-credential-helper.exe kind = native_binary sizeBytes = 2024816 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

assets/windows/arkme-credential-helper.exeView on unpkg

lib/client.jsView file

•path = lib/client.js kind = oversized_source_file sizeBytes = 8394337 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

lib/client.jsView on unpkg

assets/desktop_call/bundle.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

assets/desktop_call/bundle.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/desktop_call/bundle.jsView on unpkg

lib/profile-bundle-policy-DLXDyohJ.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/profile-bundle-policy-DLXDyohJ.jsView on unpkg

lib/plugin-updater-helper-y7wzJLOx.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/plugin-updater-helper-y7wzJLOx.jsView on unpkg

Findings

1 Critical11 High7 Medium9 Low

CriticalPrevious Version Dangerous Deltalib/index.js

HighChild Processlib/extension-profile-restart-helper.js

HighShelllib/extension-profile-restart-helper.js

HighSame File Env Network Executionlib/index.js

HighCommand Output Exfiltrationlib/index.js

HighObfuscated Payload Loaderlib/persistent-runtime-CXd9RuRR.js

HighCross File Remote Execution Contextlib/index.js

HighSemantic Analysis Limitedassets/desktop_call/bundle.js

HighKnown Malware Source Similaritylib/extension-profile-restart-helper.js

HighKnown Malware Source Similaritylib/profile-bundle-policy-DLXDyohJ.js

HighKnown Malware Source Similaritylib/plugin-updater-helper-y7wzJLOx.js

HighKnown Malware Source Similarityassets/desktop_call/bundle.js

MediumDynamic Requirelib/harness-onboarding-client.js

MediumUnsafe Vm Contextlib/persistent-runtime-CXd9RuRR.js

MediumNetwork

MediumEnvironment Vars

MediumShips Native Binaryassets/windows/arkme-credential-helper.exe

MediumOversized Source Filelib/client.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvallib/persistent-runtime-CXd9RuRR.js

LowWeak Cryptolib/persistent-runtime-CXd9RuRR.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @senguoyun/dsh-arkme@0.1.61.

See version security history for other recorded verdicts.

Review the evidence and your use of @senguoyun/dsh-arkme@0.1.61 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-22 19:20:47.500Z (UTC).

84%Clean

AI assessment confidence

IntentBenign

False-positive riskLow

Review stagesource_first_review

Firewall policyMatched warn-list

The AI recommended clean, but the final policy action is warn. This report does not record a matching static-policy override reason.

Package metadata

npm

Maintainerssenguoyun

Version0.1.61

Latest on npm0.1.91

PublishedSep 17, 2026

LicenseUNLICENSED

Dependencies49

Integrityverified

Package size12.2 MB

Files1,467

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → lib/index.jstypes → lib/types/index.d.tsexports map

Runtimenode ^22.19.0 || >=24.0.0

Artifact37.9 MB · 1,467 files2 signature(s) · provenance

Install lifecycleprepare

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocketHighEntropyStringsTelemetryUrlStringsNoLicense