dsh-qzone@0.4.0
含个人配置，请用 0.4.1（已清理）
DeepSeek Harness 插件：静默 Chrome 扫码登录，自动给 QQ 空间发说说，支持配图、每日上限、主动发。
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package automatically publishes preset public posts through the user's QQ session by default, which is a dangerous capability without per-post consent. The behavior is disclosed and configurable, and no unrelated credential recipient was identified, so this warrants a warning rather than a malicious block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Plugin startup arms a timer; the first attempt runs after 90 seconds, followed by checks every 10 minutes.
Impact
Unrequested public posts may appear on the user's QQ Space account.
Mechanism
The task uses the active QQ session to publish preset text, optionally with an image, using public visibility by default. It observes time, rate, and chance limits; the local autopost config can disable it.
AI rationale
The package automatically publishes preset public posts through the user's QQ session by default, which is a dangerous capability without per-post consent. The behavior is disclosed and configurable, and no unrelated credential recipient was identified, so this warrants a warning rather than a malicious block.
Evidence
index.jslib/qzone.js~/.dsh/qzone-autopost.json~/.dsh/qzone-autopost.log~/.dsh/qzone-publish-log.json
Network endpoints2
user.qzone.qq.comtaotao.qzone.qq.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Automatic posting is enabled by default, set to public visibility, and can post up to two times daily.
- The plugin arms an automatic post attempt 90 seconds after startup and retries every 10 minutes.
- The automatic task publishes preset content through the logged-in QQ account, retrying without an image if image posting fails.
- The README discloses that the plugin can post without button presses, but does not describe the default automatic posting configuration.
Evidence against
- The manifest has no install, preinstall, or postinstall hook.
- The login and posting requests inspected target QQ hosts; no unrelated credential receiver was identified.
- The README describes automatic posting as a feature, and users can disable it in the local autopost configuration.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedlib/uipost.jsView file
1// 网页 UI 带图发说说：在专属 Chrome 里打开空间主页，真实操作「写文字 → 传图 → 点发表」
L2: import { spawn } from 'node:child_process'
L3: import { existsSync } from 'node:fs'
High
lib/silent.jsView file
1// 静默 Chrome（跟抖音同款）：专属 profile + headless + CDP，用真实浏览器完成 QQ 扫码登录
L2: import { spawn } from 'node:child_process'
L3: import { existsSync } from 'node:fs'
...
L11: 'C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe',
L12: path.join(process.env.LOCALAPPDATA || '', 'Google', 'Chrome', 'Application', 'chrome.exe'),
L13: ]
...
L16: const PORT = Number(process.env.QZONE_CHROME_PORT || 9335)
L17: const LOGIN_URL = 'https://xui.ptlogin2.qq.com/cgi-bin/xlogin?daid=5&appid=549000912&style=20&hide_title_bar=1&low_login=1&qlogin_auto_login=1&no_verifyimg=1&link_target=blank&targ...
L18:
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
lib/silent.jsView on unpkg · L1Findings
2 Critical2 High4 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationlib/qqlogin.js
CriticalTrigger Reachable Dangerous Capabilitylib/qqlogin.js
HighChild Processlib/uipost.js
HighSame File Env Network Executionlib/silent.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidenceindex.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to dsh-qzone@0.4.0.
See all versions of dsh-qzone for other recorded verdicts.
- Review the evidence and your use of dsh-qzone@0.4.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.