dsh-win32@0.15.2

⚠ Under review

Native Windows shell and Workspace Write sandbox presets for DeepSeek Harness. No WSL. One command.

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 9 file(s), 81.1 KB of source, external domains: frippery.org, git-scm.com, github.com

Source & flagged code

7 flagged

bin/cli.mjsView file

Lines 1-104javascript

1#!/usr/bin/env node

2/**

3 * dsh-win32 CLI: `doctor` diagnoses the known DSH-on-Windows traps,

4 * `setup` installs the minimal-windows agent preset (and optionally a

5 * desktop shortcut). Zero dependencies.

6 */

8import { execFileSync } from 'node:child_process'

9import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'node:fs'

High

Child Process

Package source references child process execution.

bin/cli.mjsView on unpkg · L7

10import { homedir } from 'node:os'

11import { dirname, join, resolve } from 'node:path'

12import { fileURLToPath } from 'node:url'

13import process from 'node:process'

14// Shared with the runtime so the two never drift; lib/ always ships with bin/.

15import { findGitBash, installPreset, busyboxPath } from '../lib/preset-install.js'

17const WIN = process.platform === 'win32'

18const DSH_HOME = process.env.DSH_HOME ?? join(homedir(), '.dsh')

19const PRESET_ID = 'minimal-windows'

20const PRESET_SRC = join(dirname(fileURLToPath(import.meta.url)), '..', 'preset', PRESET_ID)

21const REPO = 'https://github.com/sjh9714/dsh-win32'

22const SELF_VERSION = JSON.parse(

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/cli.mjsView on unpkg · L7

23 readFileSync(join(dirname(fileURLToPath(import.meta.url)), '..', 'package.json'), 'utf8'),

24).version

26const ok = message => console.log(` ok ${message}`)

27const warn = message => console.log(` WARN ${message}`)

28const bad = message => console.log(` FAIL ${message}`)

29const info = message => console.log(` tip ${message}`)

31function tryExec(file, args) {

32 try {

33 return execFileSync(file, args, { encoding: 'utf8', windowsHide: true, stdio: ['ignore', 'pipe', 'ignore'] })

34 } catch {

35 return undefined

36 }

37}

39function findPwsh7() {

40 if (process.env.ProgramFiles !== undefined) {

41 const candidate = join(process.env.ProgramFiles, 'PowerShell', '7', 'pwsh.exe')

42 if (existsSync(candidate)) return candidate

High

Shell

Package source references shell execution.

bin/cli.mjsView on unpkg · L40

43 }

44 const located = tryExec('where.exe', ['pwsh'])

45 const first = (located ?? '').split(/\r?\n/)[0]?.trim()

46 return first !== undefined && first !== '' ? first : undefined

47}

49/**

50 * pnpm backs the profile-directory install: `dsh plugin add` forwards to it,

51 * so a box without pnpm fails the bundle wiring with a bare

52 * "'pnpm' is not recognized" and no hint about what is actually missing (#13).

53 */

54function findPnpm() {

55 const located = tryExec(WIN ? 'where.exe' : 'which', ['pnpm'])

56 const first = (located ?? '').split(/\r?\n/)[0]?.trim()

57 return first !== undefined && first !== '' ? first : undefined

58}

60/** node ships corepack, so a missing pnpm is recoverable without a download. */

64 execFileSync(WIN ? 'corepack.cmd' : 'corepack', ['enable', 'pnpm'], {

65 stdio: 'ignore',

66 windowsHide: true,

67 shell: WIN,

68 })

69 } catch {

70 return undefined

71 }

72 return findPnpm()

73}

75/** koffi 3.1.3/3.1.4 ship a broken win32-x64 prebuilt (segfault chain: install failures, picker crash, silent session-save crash). */

76function scanKoffi() {

77 const results = []

78 const profilesDir = join(DSH_HOME, 'profiles')

79 if (!existsSync(profilesDir)) return results

80 for (const profile of readdirSync(profilesDir)) {

81 const manifest = join(profilesDir, profile, 'node_modules', 'koffi', 'package.json')

82 if (!existsSync(manifest)) continue

83 try {

84 const version = JSON.parse(readFileSync(manifest, 'utf8')).version

85 const loadable = tryExec(process.execPath, ['-e', 'require(process.argv[1])', dirname(manifest)]) !== undefined

86 results.push({ profile, version, loadable })

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.mjsView on unpkg · L84

87 } catch {

88 // Unreadable manifest: nothing to report for this profile.

89 }

90 }

91 return results

92}

94/**

95 * True for `Git\bin\bash.exe`, the 47KB wrapper that respawns the real shell

96 * in `Git\usr\bin`. Note that the real path also ends in `\bin\bash.exe`,

97 * so the `usr` segment is what tells them apart and matching only the tail

98 * flags the correct shell as the wrapper.

99 */

100export function isBashWrapper(path) {

101 const normalized = path.replaceAll('\\', '/')

102 return /\/bin\/bash\.exe$/i.test(normalized) && !/\/usr\/bin\/bash\.exe$/i.test(normalized)

103}

104

Lines 134-174javascript

134

135 const pnpm = findPnpm()

136 if (pnpm !== undefined) add('pnpm', 'pass', pnpm)

137 else add('pnpm',

•matchType = previous_version_dangerous_delta matchedPackage = dsh-win32@0.11.0 matchedIdentity = npm:ZHNoLXdpbjMy:0.11.0 similarity = 0.556 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/cli.mjsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. bin/cli.mjs: import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'node:fs' const REPO = 'https://github.com/sjh9714/dsh-win32' const manifest = join(profilesDir, profile, 'node_modules', 'koffi', 'package.json') add('dsh-win32/bundle', 'warn', 'listed in the profile manifest but absent from its node_modules, so the runtime never loads', 'npx dsh-win32 setup') if (gitBash === undefined) add('git_bash', 'fail', 'Git Bash not found', 'install from https://git-scm.com (winget install Git.Git), then re-run') const installed = join(DSH_HOME, 'profiles', profile, 'node_modules', 'dsh-win32', 'package.json') const

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

bin/cli.mjsView on unpkg

Source & flagged code

7 flagged · loading source

bin/cli.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/cli.mjsView on unpkg

7L8: import { execFileSync } from 'node:child_process' L9: import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'node:fs'

High

Child Process

Package source references child process execution.

bin/cli.mjsView on unpkg · L7

40if (process.env.ProgramFiles !== undefined) { L41: const candidate = join(process.env.ProgramFiles, 'PowerShell', '7', 'pwsh.exe') L42: if (existsSync(candidate)) return candidate

High

Shell

Package source references shell execution.

bin/cli.mjsView on unpkg · L40

Findings

1 Critical5 High4 Medium5 Low

CriticalPrevious Version Dangerous Deltabin/cli.mjs

HighChild Processbin/cli.mjs

HighShellbin/cli.mjs

HighSame File Env Network Executionbin/cli.mjs

HighEntrypoint Foreign Package Code Overwritebin/cli.mjs

HighRuntime Package Installbin/cli.mjs

MediumDynamic Requirebin/cli.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to dsh-win32@0.15.2.

See all versions of dsh-win32 for other recorded verdicts.

Review the evidence and your use of dsh-win32@0.15.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-22 22:09:41.767Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.