registry / dsh-tg-bridge / 1.3.2
dsh-tg-bridge@1.3.2
устаревшая сборка — ставьте 1.11.0 или новее
Telegram bridge for DeepSeek Harness: text, voice, photos and project-per-topic sessions without opening the desktop app
AI Security Review
scanned 11d ago · by lpm-firewall-aiSource inspection found no confirmed attack behavior. The scanner's runtime hints correspond to bridge processing and local control operations; the agent configuration write is an explicit, sender-checked persona command.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The bridge runs when started; a persona update requires an authorized Telegram sender to issue /soul with text.
Impact
No unrelated credential disclosure, hidden install behavior, or unrequested remote account change was established.
Mechanism
The bridge uses its configured Telegram bot token for Telegram API requests, processes local command output, fetches public model data, and writes requested persona text to DSH's instructions file.
AI rationale
Source inspection found no confirmed attack behavior. The scanner's runtime hints correspond to bridge processing and local control operations; the agent configuration write is an explicit, sender-checked persona command.
Evidence
package.jsonbridge.mjscontrol.mjssetup.mjsbridge-restart-idle.mjsrestart-after-send.mjsprices.mjs
Network endpoints3
api.telegram.orgunorouter.com/en/modelsmodels.dev/api.json
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies bridge.mjs as the main entrypoint and lists user-run scripts for starting, setup, checking, menu, doctor, and tests.
- The bridge obtains its bot token from local configuration or an environment variable and builds Telegram API requests with it; incoming messages from unconfigured users or chats are ignored.
- The inspected bridge and control runtime locations process CLI or transcription output and implement local control commands; they do not establish credential forwarding or an unrequested account action.
- Persona changes are performed by the explicit /soul command, which writes the persona section of DSH's AGENTS.md; the bridge checks the sender against configured user or chat IDs first.
- Setup checks the Telegram bot through getMe, restart helpers inspect local processes and logs, and price lookups fetch public model data from the listed catalogs.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
11 flaggedsetup.mjsView file
19L20: import { spawnSync } from 'node:child_process';
L21: import { appendFileSync, existsSync, readFileSync, openSync, closeSync, unlinkSync, writeFileSync } from 'node:fs';
High
19L20: import { spawnSync } from 'node:child_process';
L21: import { appendFileSync, existsSync, readFileSync, openSync, closeSync, unlinkSync, writeFileSync } from 'node:fs';
...
L24:
L25: const DSH_HOME = process.env.DSH_HOME || join(homedir(), '.dsh');
L26: const BRIDGE_DIR = join(DSH_HOME, 'tg-bridge');
...
L48: let held = 0;
L49: try { held = Number(JSON.parse(readFileSync(LOCK, 'utf8')).pid) || 0; } catch {}
L50: let alive = false;
...
L63: /**
L64: * Every step is written to setup.log as well as stdout.
L65: *
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
setup.mjsView on unpkg · L19•matchType = normalized_sha256
matchedPackage = dsh-tg-bridge@1.3.0
matchedPath = setup.mjs
matchedIdentity = npm:ZHNoLXRnLWJyaWRnZQ:1.3.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Findings
2 Critical8 High4 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationbridge.mjs
CriticalPrevious Version Dangerous Deltabridge.mjs
HighChild Processsetup.mjs
HighCommand Output Exfiltrationsetup.mjs
HighKnown Malware Source Similaritybridge.mjs
HighKnown Malware Source Similaritycontrol.mjs
HighKnown Malware Source Similaritybridge-restart-idle.mjs
HighKnown Malware Source Similarityrestart-after-send.mjs
HighKnown Malware Source Similaritysetup.mjs
HighKnown Malware Source Similarityprices.mjs
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to dsh-tg-bridge@1.3.2.
See all versions of dsh-tg-bridge for other recorded verdicts.
- Review the evidence and your use of dsh-tg-bridge@1.3.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.