dsh-versatileds@0.3.8
多功能DS插件：B站 小号代理与 QQ 代理合体，左侧栏一个入口，B站 / QQ 两个模块分页配置；QQ 侧支持本地 GPT-SoVITS 语音（可一键部署），各项组件仅供学习和个人使用、禁止商用
AI Security Review
scanned 10d ago · by lpm-firewall-aiSource confirms automatic, publisher-selected comments through the user's authenticated Bilibili account, enabled by default and not tied to a per-comment user request. This is concrete account-action behavior and warrants blocking publication.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Loading the plugin starts a timer that invokes automatic browsing after a delay when the Bilibili module is active.
Impact
The user's account can publish comments without a specific user request for each video.
Mechanism
The routine selects videos matching configured topics, generates comment text, bypasses dry-run protection, and submits comments using the account session.
Attack narrative
When the Bilibili module is active, its default settings schedule automatic browsing and allow automatic comments. The routine selects topic-matched videos, drafts comments, then explicitly disables dry-run protection and posts them through the authenticated account. Topic filters and a comment guard narrow the behavior, but do not require the user to request each account action.
AI rationale
Source confirms automatic, publisher-selected comments through the user's authenticated Bilibili account, enabled by default and not tied to a per-comment user request. This is concrete account-action behavior and warrants blocking publication.
Evidence
bili/index.jslib/bili.js
Network endpoints1
api.bilibili.com
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- bili/index.js enables automatic browsing and commenting by default, with an automatic timer that runs the browsing routine.
- The automatic routine drafts comments for selected videos, disables dry-run protection, and sends them through the authenticated Bilibili comment API.
- lib/bili.js posts the comment text and session CSRF value to the Bilibili reply endpoint.
Evidence against
- Commenting is limited by configuration, a comment guard, topic matching, and a per-video repeat check.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
11 flaggedindex.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = dsh-versatileds@0.3.6
matchedIdentity = npm:ZHNoLXZlcnNhdGlsZWRz:0.3.6
similarity = 0.875
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
index.jsView on unpkg13L14: import { spawnSync } from 'node:child_process'
L15: import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs'
High
•matchType = normalized_sha256
matchedPackage = dsh-versatileds@0.3.7
matchedPath = index.js
matchedIdentity = npm:ZHNoLXZlcnNhdGlsZWRz:0.3.7
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
index.jsView on unpkgFindings
3 Critical7 High3 Medium5 Low
CriticalDownload Executeqq/index.js
CriticalTrigger Reachable Dangerous Capabilityqq/index.js
CriticalPrevious Version Dangerous Deltaindex.js
HighChild Processindex.js
HighSemantic Analysis Limitedbili/index.js#virtual:normalized:round1
HighKnown Malware Source Similarityqq/deploy-gsv.mjs
HighKnown Malware Source Similarityqq/index.js
HighKnown Malware Source Similarityindex.js
HighKnown Malware Source Similaritylib/live.js
HighKnown Malware Source Fingerprint Signatureqq/deploy-gsv.mjs
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to dsh-versatileds@0.3.8.
See all versions of dsh-versatileds for other recorded verdicts.
- Avoid installing dsh-versatileds@0.3.8. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.