registry / dsh-tg-bridge / 1.19.1
dsh-tg-bridge@1.19.1
Telegram bridge for DeepSeek Harness: text, voice, photos and project-per-topic sessions without opening the desktop app
AI Security Review
scanned 9d ago · by lpm-firewall-aiSource inspection resolved the scanner’s credential and agent-configuration indicators: the probe targets the configured provider, while commands are gated by the Telegram allowlist. The manifest has no install lifecycle hook, and no malicious behavior was identified.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user starts the bridge; the probe runs after specified provider fallback errors, and commands are processed only for configured user or chat IDs.
Impact
Inspected behavior supports the package’s stated bridge and diagnostics functions; no unrelated credential transfer or unconsented configuration change was found.
Mechanism
The probe reads the configured provider URL and key, then sends a one-token ping to that provider. Telegram requests go to the Telegram API; agent and profile changes are explicit commands.
AI rationale
Source inspection resolved the scanner’s credential and agent-configuration indicators: the probe targets the configured provider, while commands are gated by the Telegram allowlist. The manifest has no install lifecycle hook, and no malicious behavior was identified.
Evidence
package.jsonbridge.mjsmodel-probe.mjscontrol.mjsprofile-edit.mjsinstall-hooks.mjssetup.mjsbridge-restart-idle.mjsrestart-after-send.mjs
Network endpoints1
api.telegram.org
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json lists ordinary commands and entrypoints, has no lifecycle hook or dependency, and ends without an install script.
- The probe gets its provider URL and key name from the active DSH profile or provider environment settings; on fallback errors it sends a one-token ping with that provider’s key to that provider.
- bridge.mjs sends Telegram API requests to api.telegram.org and ignores messages from user or chat IDs not in the configured allowlist.
- The agent configuration write is reached through an explicit command, and the bridge checks the configured allowlist before processing incoming messages.
- Inspected runtime operations handle DSH settings, status, logs, messages, and user-requested restarts; the profile editor performs targeted text transformations.
- The hook installer and setup or restart helpers are standalone utilities invoked by explicit commands; their inspected behavior concerns secret scanning and bridge management.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
10 flaggedinstall-hooks.mjsView file
13// Usage: node install-hooks.mjs [--uninstall]
L14: import { execFileSync } from 'node:child_process';
L15: import { existsSync, mkdirSync, chmodSync, writeFileSync } from 'node:fs';
High
control.mjsView file
2062try {
L2063: const drives = execFileSync('powershell', ['-NoProfile', '-NonInteractive', '-Command', '(Get-PSDrive C).Free'], {
L2064: encoding: 'utf8',
High
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
ed') }));
}
function sessiontitle(id) {
const record = readjson(join(dsh_home, 'storages', 'session_projcache', 'sessions', `session-${bareid(id)}.json`));
const rows = record?.record?.rows ?? record?.rows ?? {};
const title = rows.title?.val;
if (typeof title === 'string' && title.trim()) return title.trim();
const first = rows.titleinput?.val?.first?.text;
if (typeof first === 'string' && first.trim()) return first.tr
Findings
2 Critical7 High4 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationbridge.mjs
CriticalPrevious Version Dangerous Deltabridge.mjs
HighChild Processinstall-hooks.mjs
HighShellcontrol.mjs
HighCommand Output Exfiltrationsetup.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationcontrol.mjs
HighSemantic Analysis Limitedpanel.mjs#virtual:normalized:round1
HighKnown Malware Source Similaritybridge-restart-idle.mjs
HighKnown Malware Source Similarityrestart-after-send.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
Affected versions and remediation
This report applies to dsh-tg-bridge@1.19.1.
See all versions of dsh-tg-bridge for other recorded verdicts.
- Review the evidence and your use of dsh-tg-bridge@1.19.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.