registry / dsh-tg-bridge / 1.42.0
dsh-tg-bridge@1.42.0
Drive DeepSeek Harness from Telegram: one project, model and session per forum topic
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe reviewed entry points, setup code, and credential flows fit a Telegram-to-DeepSeek bridge. The scanner’s command-output and credential-flow leads resolve to local setup checks and requests to Telegram or configured providers; no malicious behavior was found.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Bridge startup after configuration, explicit setup or install commands, and user-triggered voice transcription or model probing.
Impact
No malicious impact identified from the reviewed source.
Mechanism
The bridge communicates with Telegram; model and voice requests use configured provider endpoints and their corresponding credentials. Setup performs local process checks and a Telegram getMe request.
AI rationale
The reviewed entry points, setup code, and credential flows fit a Telegram-to-DeepSeek bridge. The scanner’s command-output and credential-flow leads resolve to local setup checks and requests to Telegram or configured providers; no malicious behavior was found.
Evidence
plugin-bridge.mjssetup.mjsmodel/model-probe.mjschat/media.mjsinstall.sh
Network endpoints4
api.telegram.orgapi.openai.com/v1 (default voice endpoint)provider base URL configured in the DSH profilevoice.baseUrl configured by the user
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as a Telegram bridge for DeepSeek Harness, with plugin and CLI entry points.
- The plugin starts the bridge only after configuration exists; its startup behavior serves the package’s stated purpose.
- Model probes read the provider URL and API key environment variable from the selected DSH profile, then send the key to that provider’s chat completions endpoint.
- Voice transcription sends audio and its configured API key to the voice endpoint selected in configuration.
- The setup check uses the Telegram bot token with Telegram’s own getMe API endpoint.
Evidence against
- The manifest declares no lifecycle scripts; setup and hooks are explicit npm commands.
- The reviewed command output is used for local setup checks and status reporting; no unrelated collector or command-output upload was identified.
- The credential destinations found are Telegram’s API or user-configured model and voice providers.
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
10 flaggedinstall-hooks.mjsView file
13// Usage: node install-hooks.mjs [--uninstall]
L14: import { execFileSync } from 'node:child_process';
L15: import { existsSync, mkdirSync, chmodSync, writeFileSync } from 'node:fs';
High
setup.mjs#virtual:normalized:round1View file
107try {
L108: const r = run("powershell", [
L109: "-NoProfile", "-NonInteractive", "-Command",
...
L111: ]);
L112: return Number((r.stdout || "").trim()) || 0;
L113: } catch {
...
L117:
L118: /** True when the pid exists — EPERM still means alive (another user"s process). */\r\nfunction alive(pid) {\r\n try {\r\n process.kill(pid, 0);\r\n return true;\r\n } catc...
L119: // bridge" and both start a poller (409 getUpdates Conflict). Going through\r\n // bridge-kick.mjs means every start happens under restart.lock after a check.\r\n c...
Critical
Command Output Exfiltration
Source executes local commands and sends command output to an external endpoint.
setup.mjs#virtual:normalized:round1View on unpkg · L107Findings
2 Critical6 High4 Medium5 Low
CriticalCommand Output Exfiltrationsetup.mjs#virtual:normalized:round1
CriticalPrevious Version Dangerous Deltaplugin-bridge.mjs
HighChild Processinstall-hooks.mjs
HighShellsetup.mjs#virtual:normalized:round1
HighSame File Env Network Executionsetup.mjs#virtual:normalized:round1
HighSemantic Analysis Limitedchat/media.mjs#virtual:normalized:round1
HighKnown Malware Source Similaritywork/bridge-restart-idle.mjs
HighKnown Malware Source Similaritywork/restart-after-send.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to dsh-tg-bridge@1.42.0.
See all versions of dsh-tg-bridge for other recorded verdicts.
- Review the evidence and your use of dsh-tg-bridge@1.42.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.