registry / dsh-tg-bridge / 1.45.0
dsh-tg-bridge@1.45.0
Drive DeepSeek Harness from Telegram: one project, model and session per forum topic
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged setup request validates the user’s Telegram bot token against Telegram, while model probes and audio transcription send credentials or content to configured service endpoints for their stated features. The inspected paths do not show unrelated collection, concealed execution, or an automatic account action toward a publisher-chosen target.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Setup runs when explicitly invoked; model probes run when requested by bridge features; transcription runs for an audio message.
Impact
Expected service requests using user-configured credentials and user-provided audio; no unrelated collection or attack behavior identified.
Mechanism
Uses the Telegram bot token with Telegram’s API, reads provider credentials for the provider configured in the DSH profile, and sends audio to the configured speech endpoint.
AI rationale
The flagged setup request validates the user’s Telegram bot token against Telegram, while model probes and audio transcription send credentials or content to configured service endpoints for their stated features. The inspected paths do not show unrelated collection, concealed execution, or an automatic account action toward a publisher-chosen target.
Network endpoints3
api.telegram.org{configured provider.baseUrl}{configured voice.baseUrl; default https://api.openai.com/v1}
Decision evidence
public snapshotAI called this Clean at 98.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a DeepSeek Harness to Telegram bridge.
- The setup command reads the Telegram bot token and checks it with Telegram’s own getMe endpoint.
- Model probes read the provider URL and key variable from the active DSH profile, then send a one-token ping to that provider.
- Voice transcription sends audio and its configured key to the configured speech endpoint.
Evidence against
- The inspected setup network request targets api.telegram.org, consistent with the bridge’s stated purpose.
- The model probe uses the provider URL and key variable configured in the DSH profile.
- Voice transcription is invoked for audio messages and uses the configured voice endpoint.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedinstall-hooks.mjsView file
13// Usage: node install-hooks.mjs [--uninstall]
L14: import { execFileSync } from 'node:child_process';
L15: import { existsSync, mkdirSync, chmodSync, writeFileSync } from 'node:fs';
High
setup.mjs#virtual:normalized:round1View file
107try {
L108: const r = run("powershell", [
L109: "-NoProfile", "-NonInteractive", "-Command",
...
L111: ]);
L112: return Number((r.stdout || "").trim()) || 0;
L113: } catch {
...
L117:
L118: /** True when the pid exists — EPERM still means alive (another user"s process). */\r\nfunction alive(pid) {\r\n try {\r\n process.kill(pid, 0);\r\n return true;\r\n } catc...
L119: // bridge" and both start a poller (409 getUpdates Conflict). Going through\r\n // bridge-kick.mjs means every start happens under restart.lock after a check.\r\n c...
Critical
Command Output Exfiltration
Source executes local commands and sends command output to an external endpoint.
setup.mjs#virtual:normalized:round1View on unpkg · L107Findings
2 Critical6 High4 Medium5 Low
CriticalCommand Output Exfiltrationsetup.mjs#virtual:normalized:round1
CriticalPrevious Version Dangerous Deltacontrol/cmd-bridge.mjs
HighChild Processinstall-hooks.mjs
HighShellsetup.mjs#virtual:normalized:round1
HighSame File Env Network Executionsetup.mjs#virtual:normalized:round1
HighSemantic Analysis Limitedchat/media.mjs#virtual:normalized:round1
HighKnown Malware Source Similaritywork/bridge-restart-idle.mjs
HighKnown Malware Source Similaritywork/restart-after-send.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to dsh-tg-bridge@1.45.0.
See all versions of dsh-tg-bridge for other recorded verdicts.
- Review the evidence and your use of dsh-tg-bridge@1.45.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.