Loading npm security reports…

dsh-oc@0.1.8: Malicious npm security report (Block) | LPM Firewall

registry / dsh-oc / 0.1.8

dsh-oc@0.1.8

DeepSeek Harness 插件全家桶:会话新窗口、深链自动选中、桌面壳自动标记,并自动带上 dsh-better-sidebar 右侧工作台。

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Installing in a DSH profile automatically launches code that attempts to change system DNS resolution and creates launcher shortcuts. This is unconsented install-time system mutation.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm postinstall inside a DSH profile

Impact

Can redirect GitHub traffic and add persistent user launch artifacts.

Mechanism

detached launcher invokes PowerShell to alter hosts mappings and create shortcuts

Attack narrative

The postinstall hook starts the bundled launcher without user action. Its default launch path synchronously invokes install.ps1 with PowerShell execution-policy bypass; that script calls Ensure-GitHubReachable before handling ShortcutOnly, attempting to rewrite the Windows hosts file for GitHub domains and flush DNS. It also creates a hidden VBS launcher and Desktop/Start Menu shortcuts.

Rationale

The verified install-time chain performs unconsented hosts-file/DNS mutation and drops launch artifacts. This is concrete harmful behavior, not merely a user-invoked installer.

Evidence

package.jsonscripts/auto-start.mjsbin/dsh-oc.cjsinstall.ps1C:\Windows\System32\drivers\etc\hosts%APPDATA%\dsh-oc\launch.vbs

Network endpoints3

github.comapi.github.comraw.githubusercontent.com

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/auto-start.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

launcher/main.jsView file

5const { app, BrowserWindow, Tray, Menu, Notification, globalShortcut, ipcMain, shell, nativeImage } = require('electron'); L6: const { spawn, execFile } = require('node:child_process'); L7: const fs = require('node:fs');

High

Child Process

Package source references child process execution.

launcher/main.jsView on unpkg · L5

211log('info', `web engine already running at 127.0.0.1:${WEB_PORT} — connecting as another entry`); L212: onHarnessReady(`http://127.0.0.1:${WEB_PORT}`); L213: return; ... L222: let proc; L223: const spawnEnv = { ...process.env, DSH_HOME: dataHome }; L224: if (process.platform === 'win32' && command === 'npx') { ... L226: const line = ['npx', ...fullArgs].map((a) => (/\s/.test(a) ? `"${a}"` : a)).join(' '); L227: proc = spawn(process.env.ComSpec || 'cmd.exe', ['/d', '/s', '/c', line], { windowsHide: true, env: spawnEnv, stdio: ['ignore', 'pipe', 'pipe'] }); L228: } else {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

launcher/main.jsView on unpkg · L211

launcher/preload.jsView file

9L10: const { contextBridge, ipcRenderer } = require('electron'); L11:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

launcher/preload.jsView on unpkg · L9

install.ps1View file

•path = install.ps1 kind = build_helper sizeBytes = 7380 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.ps1View on unpkg

bin/dsh-oc.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = dsh-oc@0.1.7 matchedIdentity = npm:ZHNoLW9j:0.1.7 similarity = 0.909 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/dsh-oc.cjsView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 10-50json

10 "exports": {

11 ".": "./lib/index.js",

12 "./client": "./lib/client.js",

13 "./cordis.patch.yml": "./cordis.patch.yml",

14 "./package.json": "./package.json"

15 },

16 "files": [

17 "lib",

18 "bin",

19 "launcher",

20 "assets",

21 "cordis.patch.yml",

22 "install.ps1",

23 "scripts/auto-start.mjs",

24 "README.md",

25 "LICENSE"

26 ],

27 "scripts": {

28 "test": "node scripts/test.mjs",

29 "build:launcher": "node scripts/build-launcher.mjs",

30 "postinstall": "node scripts/auto-start.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L30

31 "prepack": "node scripts/build-launcher.mjs && node --check lib/index.js && node --check lib/client.js && node scripts/test.mjs"

32 },

33 "dsh": {

34 "bundle": {

35 "patch": "./cordis.patch.yml"

36 },

37 "client": {

38 "platform": "web",

39 "inject": [

40 "@deepseek-ai/dsh-client-locale",

41 "@deepseek-ai/dsh-client-ui-conversation"

42 ]

43 }

44 },

45 "dependencies": {

46 "@deepseek-ai/dsh-session-reference": "^0.1.0-rc.6",

47 "dsh-better-sidebar": "^0.15.0",

48 "electron": "43.4.0"

49 },

50 "peerDependencies": {

launcher/main.jsView file

Lines 1-25javascript

1'use strict';

2// dsh-desktop 主进程

3// 职责:单实例锁 / spawn 本地引擎(dsh web)/ 窗口与自绘标题栏 / 托盘 / 通知 /

4// 全局快捷键 / 开机自启 / 窗口状态记忆 / 崩溃自愈

5const { app, BrowserWindow, Tray, Menu, Notification, globalShortcut, ipcMain, shell

launcher/preload.jsView file

Lines 1-29javascript

1'use strict';

2// dsh-desktop preload(沙箱内运行)

3// 职责:暴露最小桥 dshNative;自绘标题栏(纯壳能力,不依赖 SPA 结构):

4// 32px 高、固定深色背景、1px 底部分隔线;左侧 32x32 Logo 区(24px 鲸鱼)+ 应用名;

5// 右侧 46x32 窗口按钮(10px 系统字形 Segoe Fluent Icons),仿 Win11 悬停,

6// 关闭键红底白字;最大化/还原字形随窗口状态切换。

7// 注意:不再注入任何 SPA 修改(无折叠按钮/卡片圆角/主题同步/更新按钮)——

8// SPA 保持官方原生显示。

9

10const { contextBridge,

install.ps1View file

•path = install.ps1 kind = build_helper sizeBytes = 7380 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.ps1View on unpkg

bin/dsh-oc.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = dsh-oc@0.1.7 matchedIdentity = npm:ZHNoLW9j:0.1.7 similarity = 0.909 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/dsh-oc.cjsView on unpkg

Lines 191-231javascript

191// 合并模式:优先连接已运行的 web 端引擎(127.0.0.1:3080)——同一引擎、同一数据;

192// 没有则自己启动(固定 3080 端口,天然防止双实例写同一数据根)。

193const WEB_PORT = 3080;

194function probePort(port, timeoutMs, cb) {

195 httpGet(`http://127.0.0.1:${port}/`, timeoutMs)

196 .then(() => { log('info', `probe ${port}: alive`); cb(true); })

197 .catch((e) => { log('warn', `probe ${port}: not responding (${e && e.message ? e.message : e})`); cb(false

198}

199function httpGet(url, timeoutMs) {

200 return new Promise((resolve, reject) => {

201 const req = require('node:http').get(url, (res) => { res.resume(); resolve(res.statusCode); });

202 req.setTimeout(timeoutMs || 1500, () => { req.destroy(new Error('timeout')); });

203 req.on('error', reject);

204 });

205}

206function startHarness() {

207 if (child) return;

208 // 1. 检测 web 端引擎是否已在跑

209 probePort(WEB_PORT, 1500, (alive) => {

210 if (alive) {

211 log('info', `web engine already running at 127.0.0.1:${WEB_PORT} — connecting as another entry`);

212 onHarnessReady(`http://127.0.0.1:${WEB_PORT}`);

213 return;

214 }

215 spawnEngine();

216 });

217}

218function spawnEngine() {

219 const { command, args } = resolveLauncher();

220 const fullArgs = [...args, '--host', '127.0.0.1', '--port', String(WEB_PORT)];

221 log('info', `spawning harness: ${command} ${fullArgs.join(' ')} (DSH_HOME=${dataHome})`);

222 let proc;

223 const spawnEnv = { ...process.env, DSH_HOME: dataHome };

224 if (process.platform === 'win32' && command === 'npx') {

225 // npx 是 .cmd,须经 cmd /c 执行;windowsHide 隐藏命令窗口

226 const line = ['npx', ...fullArgs].map((a) => (/\s/.test(a) ? `"${a}"` : a)).join(' ');

227 proc = spawn(process.env.ComSpec || 'cmd.exe', ['/d', '/s', '/c', line], { windowsHide: true, env: spawnEnv, stdio: ['ignore', 'pipe', 'pipe'] });

228 } else {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

launcher/main.jsView on unpkg · L211

229 proc = spawn(command, fullArgs, { windowsHide: true, env: spawnEnv, stdio: ['ignore', 'pipe', 'pipe'] });

230 }

231 child = proc;