registry / dsh-tg-bridge / 1.31.0
dsh-tg-bridge@1.31.0
Telegram bridge for [DSH]: text, voice, photos and project-per-topic sessions without opening the desktop app
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged command execution and credential transport fit the package’s setup and model-recovery functions. The probe sends its key and a one-token request to the configured provider, and no install-time hook or unrelated collector was found.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The plugin starts the bridge when applied with a runtime config; provider probes occur during model recovery.
Impact
No unrelated credential collection, data exfiltration, or unauthorized account action was identified.
Mechanism
The probe sends a one-token request with the configured API key to the provider URL from the DSH profile.
AI rationale
The flagged command execution and credential transport fit the package’s setup and model-recovery functions. The probe sends its key and a one-token request to the configured provider, and no install-time hook or unrelated collector was found.
Network endpoints2
api.telegram.orgprovider.baseUrl (configured in the DSH profile or by DSH_PROBE_BASE_URL)
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no preinstall, install, or postinstall lifecycle script; setup and hook installation are separate commands.
- The plugin starts the bridge only when applied, unless autoStart is disabled, and only after a config file exists.
- The model probe reads the provider URL and API key environment-variable name from the user’s DSH profile; the alternate URL is an explicit debug override.
- The probe sends the key to that configured provider with a one-token “ping” request.
- Fallback probes run after model failures to check whether a route is available.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedinstall-hooks.mjsView file
13// Usage: node install-hooks.mjs [--uninstall]
L14: import { execFileSync } from 'node:child_process';
L15: import { existsSync, mkdirSync, chmodSync, writeFileSync } from 'node:fs';
High
setup.mjs#virtual:normalized:round1View file
107try {
L108: const r = run("powershell", [
L109: "-NoProfile", "-NonInteractive", "-Command",
...
L111: ]);
L112: return Number((r.stdout || "").trim()) || 0;
L113: } catch {
...
L117:
L118: /** True when the pid exists — EPERM still means alive (another user"s process). */\r\nfunction alive(pid) {\r\n try {\r\n process.kill(pid, 0);\r\n return true;\r\n } catc...
L119: // bridge" and both start a poller (409 getUpdates Conflict). Going through\r\n // bridge-kick.mjs means every start happens under restart.lock after a check.\r\n c...
Critical
Command Output Exfiltration
Source executes local commands and sends command output to an external endpoint.
setup.mjs#virtual:normalized:round1View on unpkg · L107Findings
1 Critical6 High4 Medium5 Low
CriticalCommand Output Exfiltrationsetup.mjs#virtual:normalized:round1
HighChild Processinstall-hooks.mjs
HighShellsetup.mjs#virtual:normalized:round1
HighSame File Env Network Executionsetup.mjs#virtual:normalized:round1
HighSemantic Analysis Limitedcontrol/release.mjs#virtual:normalized:round1
HighKnown Malware Source Similaritybridge-restart-idle.mjs
HighKnown Malware Source Similarityrestart-after-send.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
LowScripts Present
Low
Affected versions and remediation
This report applies to dsh-tg-bridge@1.31.0.
See all versions of dsh-tg-bridge for other recorded verdicts.
- Review the evidence and your use of dsh-tg-bridge@1.31.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.