registry / dsh-tg-bridge / 1.8.1
dsh-tg-bridge@1.8.1
устаревшая сборка — ставьте 1.11.0 или новее
Telegram bridge for DeepSeek Harness: text, voice, photos and project-per-topic sessions without opening the desktop app
AI Security Review
scanned 10d ago · by lpm-firewall-aiSource inspection found no install lifecycle hook or unrelated credential recipient. Network requests and local process/configuration operations are consistent with user-invoked bridge and maintenance functions.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The user invokes bridge commands or sends a message through the configured Telegram bot.
Impact
No unauthorized credential transfer, install-time mutation, or other concrete attack was found.
Mechanism
The bridge communicates with Telegram, may fetch public model pricing data, and runs local DSH turns with explicitly configured provider keys.
AI rationale
Source inspection found no install lifecycle hook or unrelated credential recipient. Network requests and local process/configuration operations are consistent with user-invoked bridge and maintenance functions.
Evidence
package.jsonbridge.mjscontrol.mjssetup.mjsplugin-bridge.mjscli.mjsprices.mjsprofile-edit.mjsbridge-restart-idle.mjsrestart-after-send.mjs
Network endpoints2
api.telegram.orgmodels.dev/api.json
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines command scripts and entrypoints but no install lifecycle hook.
- The bridge reads the configured Telegram bot token and sends requests to Telegram’s Bot API; provider keys are passed to local DSH turns.
- Outbound bridge traffic is directed to Telegram, while model catalog requests use the public models.dev endpoint.
- The plugin starts the bridge only when enabled and after its configuration file exists; the CLI mirrors package files into the runtime directory when invoked.
- Control operations are command-driven, and the global persona section is updated through the control module’s setter.
- Setup and restart helpers use local process and PowerShell operations for bridge management.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedsetup.mjsView file
19L20: import { spawnSync } from 'node:child_process';
L21: import { appendFileSync, existsSync, readFileSync, openSync, closeSync, unlinkSync, writeFileSync } from 'node:fs';
High
19L20: import { spawnSync } from 'node:child_process';
L21: import { appendFileSync, existsSync, readFileSync, openSync, closeSync, unlinkSync, writeFileSync } from 'node:fs';
...
L24:
L25: const DSH_HOME = process.env.DSH_HOME || join(homedir(), '.dsh');
L26: const BRIDGE_DIR = join(DSH_HOME, 'tg-bridge');
...
L48: let held = 0;
L49: try { held = Number(JSON.parse(readFileSync(LOCK, 'utf8')).pid) || 0; } catch {}
L50: let alive = false;
...
L63: /**
L64: * Every step is written to setup.log as well as stdout.
L65: *
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
setup.mjsView on unpkg · L19control.mjsView file
1618try {
L1619: const drives = execFileSync('powershell', ['-NoProfile', '-NonInteractive', '-Command', '(Get-PSDrive C).Free'], {
L1620: encoding: 'utf8',
High
bridge.mjsView file
7Source sends the broad process environment to a literal external destination.
L7: // the logon task (see README.md).
L8: import { spawn } from 'node:child_process';
L9: import {
...
L19: // 5.3 s, IPv6 to GitHub 0.02 s refused). The --dns-result-order flag alone
L20: // does not bind fetch/undici, so pin the family on the socket layer.
L21: import dns from 'node:dns';
L22: import net from 'node:net';
...
L37:
L38: const HOME = homedir();
L39: const DSH_HOME = process.env.DSH_HOME || join(HOME, '.dsh');
L40: // State, config and logs live here. DSH_TG_HOME lets a checkout run with its own
...
L120: try {
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
bridge.mjsView on unpkg · L7transcribe.pyView file
•path = transcribe.py
kind = build_helper
sizeBytes = 3134
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
transcribe.pyView on unpkgprices.mjs#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
prices.mjs#virtual:normalized:round1View on unpkgbridge-restart-idle.mjsView file
•matchType = normalized_sha256
matchedPackage = dsh-tg-bridge@1.3.0
matchedPath = bridge-restart-idle.mjs
matchedIdentity = npm:ZHNoLXRnLWJyaWRnZQ:1.3.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bridge-restart-idle.mjsView on unpkgrestart-after-send.mjsView file
•matchType = normalized_sha256
matchedPackage = dsh-tg-bridge@1.3.0
matchedPath = restart-after-send.mjs
matchedIdentity = npm:ZHNoLXRnLWJyaWRnZQ:1.3.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
restart-after-send.mjsView on unpkgFindings
1 Critical6 High4 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationbridge.mjs
HighChild Processsetup.mjs
HighShellcontrol.mjs
HighCommand Output Exfiltrationsetup.mjs
HighSemantic Analysis Limitedprices.mjs#virtual:normalized:round1
HighKnown Malware Source Similaritybridge-restart-idle.mjs
HighKnown Malware Source Similarityrestart-after-send.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpertranscribe.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to dsh-tg-bridge@1.8.1.
See all versions of dsh-tg-bridge for other recorded verdicts.
- Review the evidence and your use of dsh-tg-bridge@1.8.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.