registry / dsh-tg-bridge / 1.7.0
dsh-tg-bridge@1.7.0
устаревшая сборка — ставьте 1.11.0 или новее
Telegram bridge for DeepSeek Harness: text, voice, photos and project-per-topic sessions without opening the desktop app
AI Security Review
scanned 10d ago · by lpm-firewall-aiSource inspection does not substantiate the scanner’s exfiltration claim: the inspected bridge sends messages to Telegram and passes explicitly configured provider keys to the local DSH process. The global persona-file write is reachable through the explicit /soul command, and the package has no install lifecycle hook.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The user starts or configures the bridge; the DSH plugin starts it when configuration exists unless autoStart is disabled.
Impact
No unauthorized credential transfer or unconsented install-time mutation was established.
Mechanism
The bridge reads its bot token from the configured environment or DSH credentials and calls Telegram’s API. The /soul command updates the persona section of the DSH instructions file when invoked with text.
AI rationale
Source inspection does not substantiate the scanner’s exfiltration claim: the inspected bridge sends messages to Telegram and passes explicitly configured provider keys to the local DSH process. The global persona-file write is reachable through the explicit /soul command, and the package has no install lifecycle hook.
Network endpoints2
api.telegram.orgmodels.dev
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the bridge and CLI through ordinary entry points and defines no install lifecycle hook.
- bridge.mjs reads the configured Telegram bot token and sends bridge messages to Telegram’s bot API; provider keys are passed to the configured local DSH process.
- control.mjs writes the persona section of the global instructions file only when the user invokes the /soul command with text.
- prices.mjs fetches public pricing data from the configured URL; its documented default is models.dev.
- setup.mjs and the restart helpers perform bridge setup or restart work; the restart helper waits for idle or message delivery before replacing the process.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedsetup.mjsView file
19L20: import { spawnSync } from 'node:child_process';
L21: import { appendFileSync, existsSync, readFileSync, openSync, closeSync, unlinkSync, writeFileSync } from 'node:fs';
High
19L20: import { spawnSync } from 'node:child_process';
L21: import { appendFileSync, existsSync, readFileSync, openSync, closeSync, unlinkSync, writeFileSync } from 'node:fs';
...
L24:
L25: const DSH_HOME = process.env.DSH_HOME || join(homedir(), '.dsh');
L26: const BRIDGE_DIR = join(DSH_HOME, 'tg-bridge');
...
L48: let held = 0;
L49: try { held = Number(JSON.parse(readFileSync(LOCK, 'utf8')).pid) || 0; } catch {}
L50: let alive = false;
...
L63: /**
L64: * Every step is written to setup.log as well as stdout.
L65: *
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
setup.mjsView on unpkg · L19control.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = dsh-tg-bridge@1.6.0
matchedIdentity = npm:ZHNoLXRnLWJyaWRnZQ:1.6.0
similarity = 0.783
summary = stored previous version shares package body but lacks this dangerous source file
Findings
2 Critical6 High4 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationbridge.mjs
CriticalPrevious Version Dangerous Deltacontrol.mjs
HighChild Processsetup.mjs
HighShellcontrol.mjs
HighCommand Output Exfiltrationsetup.mjs
HighSemantic Analysis Limitedprices.mjs#virtual:normalized:round1
HighKnown Malware Source Similaritybridge-restart-idle.mjs
HighKnown Malware Source Similarityrestart-after-send.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpertranscribe.py
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to dsh-tg-bridge@1.7.0.
See all versions of dsh-tg-bridge for other recorded verdicts.
- Review the evidence and your use of dsh-tg-bridge@1.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.